IAB Tech Lab Enhances Privacy Standards for Digital Advertising Compliance and Public Input
In a pivotal move towards bolstering privacy compliance within the digital advertising sector, IAB Tech Lab, the cornerstone of technical standards for global digital advertising, recently introduced substantial updates to its Privacy Standards Portfolio, with a public comment period extending until September 11, 2026. These updates, which encompass improvements to the Global Privacy Protocol (GPP) and the Data Deletion Request Framework (DDRF) Version 2.0, aim to enhance interoperability and align with evolving regulatory requirements across the industry.
Anthony Katsur, CEO of IAB Tech Lab, asserted that privacy mandates are ever-evolving but indicated that this should not complicate their implementation within organizations. The updated portfolio draws from comprehensive feedback garnered from organizations applying these standards, focusing on simplifying compliance efforts while maintaining clarity and transparency.
The GPP revisions specifically respond to needs identified in relation to the Fifth Amended and Restated Multi-State Privacy Agreement (MSPA). Key adjustments include the removal of coverage based on the previous state-by-state compliance model, the abolition of Service Provider and Opt-Out Option modes, and the elimination of secondary usage consents. Further refinements aim to streamline notice and choice configurations.
Moreover, DDRF Version 2.0 has reached its finalized state following an extensive public commentary phase that began in late 2025. This version incorporates practical insights gained during the initial implementation phase and clarifies definitions related to identity and deletion request JSON Web Tokens (JWT). Enhancements also include improved feedback mechanisms for results and troubleshooting, bolstered framework integrity, and the ability to support extensions specific to individual implementations. Collectively, these reforms are designed to facilitate the submission of data deletion requests while fostering enhanced trust among consumers and regulators alike.
Rowena Lam, Senior Director of Product at IAB Tech Lab, highlighted the value of the insights provided by organizations implementing these standards, emphasizing that the updates seek to improve predictability in the compliance process. She noted, "These modifications are aimed at equipping firms to meet rising privacy expectations with greater consistency."
Jeff Wheeler, VP of Product at Didomi, underscored the importance of having standardized technical protocols, stating that adherence to common privacy standards aids organizations in navigating compliance beyond their internal operations. He added that these latest adjustments to GPP and DDRF are reflective of real-world implementation experiences while also providing clearer guidance on forthcoming regulatory requirements, thus mitigating unnecessary complexities.
Developed within the framework of IAB Tech Lab's Global Privacy Working Group and the Privacy Rearc Commit Group (PRCG), these updates are a product of extensive collaboration throughout the industry. IAB Tech Lab invites stakeholders from various sectors to review the proposed specifications of the GPP and provide constructive feedback during the ongoing public commentary period, pivotal for shaping the final iterations of these standards.
For those interested in diving deeper into the enhancements made to the Privacy Standards Portfolio and contributing to the public discussion surrounding the GPP and DDRF Version 2.0 specifications, further details are available at IAB Tech Lab's official website.
Established in 2014, IAB Tech Lab serves as a non-profit consortium that brings together a diverse member community aimed at cultivating standards and technologies that encourage trust and growth within the digital media landscape. This consortium includes digital publishers, advertising technology companies, agencies, brands, and various other entities focused on addressing challenges such as brand safety and ad fraud, among others. For comprehensive insights into the organization's initiatives and leadership, please visit IAB Tech Lab Leadership.
Anthony Katsur, CEO of IAB Tech Lab, asserted that privacy mandates are ever-evolving but indicated that this should not complicate their implementation within organizations. The updated portfolio draws from comprehensive feedback garnered from organizations applying these standards, focusing on simplifying compliance efforts while maintaining clarity and transparency.
The GPP revisions specifically respond to needs identified in relation to the Fifth Amended and Restated Multi-State Privacy Agreement (MSPA). Key adjustments include the removal of coverage based on the previous state-by-state compliance model, the abolition of Service Provider and Opt-Out Option modes, and the elimination of secondary usage consents. Further refinements aim to streamline notice and choice configurations.
Moreover, DDRF Version 2.0 has reached its finalized state following an extensive public commentary phase that began in late 2025. This version incorporates practical insights gained during the initial implementation phase and clarifies definitions related to identity and deletion request JSON Web Tokens (JWT). Enhancements also include improved feedback mechanisms for results and troubleshooting, bolstered framework integrity, and the ability to support extensions specific to individual implementations. Collectively, these reforms are designed to facilitate the submission of data deletion requests while fostering enhanced trust among consumers and regulators alike.
Rowena Lam, Senior Director of Product at IAB Tech Lab, highlighted the value of the insights provided by organizations implementing these standards, emphasizing that the updates seek to improve predictability in the compliance process. She noted, "These modifications are aimed at equipping firms to meet rising privacy expectations with greater consistency."
Jeff Wheeler, VP of Product at Didomi, underscored the importance of having standardized technical protocols, stating that adherence to common privacy standards aids organizations in navigating compliance beyond their internal operations. He added that these latest adjustments to GPP and DDRF are reflective of real-world implementation experiences while also providing clearer guidance on forthcoming regulatory requirements, thus mitigating unnecessary complexities.
Developed within the framework of IAB Tech Lab's Global Privacy Working Group and the Privacy Rearc Commit Group (PRCG), these updates are a product of extensive collaboration throughout the industry. IAB Tech Lab invites stakeholders from various sectors to review the proposed specifications of the GPP and provide constructive feedback during the ongoing public commentary period, pivotal for shaping the final iterations of these standards.
For those interested in diving deeper into the enhancements made to the Privacy Standards Portfolio and contributing to the public discussion surrounding the GPP and DDRF Version 2.0 specifications, further details are available at IAB Tech Lab's official website.
Established in 2014, IAB Tech Lab serves as a non-profit consortium that brings together a diverse member community aimed at cultivating standards and technologies that encourage trust and growth within the digital media landscape. This consortium includes digital publishers, advertising technology companies, agencies, brands, and various other entities focused on addressing challenges such as brand safety and ad fraud, among others. For comprehensive insights into the organization's initiatives and leadership, please visit IAB Tech Lab Leadership.
Topics Policy & Public Interest）
【About Using Articles】
You can freely use the title and article content by linking to the page where the article is posted.
※ Images cannot be used.
【About Links】
Links are free to use.