IAB Tech Lab Updates Global Privacy Protocol, Data Deletion Request Framework
Interactive Advertising Bureau Tech Lab updated its Global Privacy Protocol (GPP) and released the second version of its Data Deletion Request Framework (DDRF), IAB Tech Lab said Thursday. The organization seeks comments by Dec. 1 on both Global Privacy Working Group projects by Dec. 1.
Sign up for a free preview to unlock the rest of this article
Privacy Daily provides accurate coverage of newsworthy developments in data protection legislation, regulation, litigation, and enforcement for privacy professionals responsible for ensuring effective organizational data privacy compliance.
IAB Tech Lab added four U.S. state sections to the GPP, including for the Maryland Online Data Privacy Act that took effect Oct. 1, and additional comprehensive privacy laws taking effect on Jan. 1 in Indiana, Kentucky and Rhode Island. Other updates “include a rearchitecture initiative designed to future-proof U.S. sections and increase signal transparency in the core GPP specifications,” IAB Tech Lab said.
"By expanding the Global Privacy Protocol to cover additional states and enhancing the core framework, we're helping the industry plan with confidence," said IAB Tech Lab CEO Anthony Katsur. The organization said it plans regular biannual updates starting in 2026. At a New York City event earlier this year, IAB Tech Lab announced a more predictable cadence of state privacy law updates (see 2503200031).
Meanwhile, DDRF version 2 aims to enhance interoperability and security for processing consumer deletion requests, IAB Tech Lab said. “The update introduces clearer object formats, standardized encoding methods, and enhanced safeguards to secure sensitive consumer data as it flows across the digital advertising supply chain.”
The new version is designed to “reduce complexity and risk for the industry," said Rowena Lam, IAB Tech Lab senior director of product. "By standardizing formats and processes, organizations can easily comply with regulatory requirements while protecting consumer data rights." Lam further detailed the updates to GPP and DDRF and the request for comments in a blog post Thursday.