IAB Tech Lab Updates Privacy Standards to Simplify Compliance Amid Evolving Regulations
Event summary
- IAB Tech Lab released updates to its Privacy Standards Portfolio, including enhancements to the Global Privacy Protocol (GPP) and Data Deletion Request Framework (DDRF) Version 2.0.
- The proposed GPP updates focus on supporting the Fifth Amended and Restated Multi-State Privacy Agreement (MSPA), simplifying notice and choice fields, and removing secondary usage consents.
- DDRF Version 2.0 finalizes updates based on implementation experience and regulator questions, clarifying identity and deletion request JSON Web Tokens (JWT) definitions.
- The public comment period for the proposed GPP specifications is open until September 11, 2026.
The big picture
The updates reflect a strategic shift towards simplifying privacy compliance in response to changing regulatory landscapes. By standardizing technical standards, IAB Tech Lab aims to reduce complexity and increase transparency for organizations operating within the digital advertising ecosystem. The collaboration across industry stakeholders underscores the growing importance of interoperability in addressing privacy risks.
What we're watching
- Regulatory Alignment
- How the updates to GPP and DDRF will affect compliance with evolving privacy regulations across different jurisdictions.
- Implementation Impact
- The pace at which companies adopt these updated standards and the potential reduction in complexity for data deletion requests.
- Industry Collaboration
- Whether the collaboration through IAB Tech Lab's Global Privacy Working Group will lead to more consistent privacy practices across the digital advertising ecosystem.