Fall 2025 Public Comment Period Now Open for Global Privacy Protocol and Data Deletion Request Framework Updates

IAB Tech Lab has opened a new public comment period covering proposed updates to two key technical specifications: the Global Privacy Protocol (GPP) and the Data Deletion Request Framework (DDRF) . These updates continue Tech Lab’s commitment to providing scalable, interoperable solutions that support privacy, transparency, and accountability across the digital advertising ecosystem. The proposed changes to the GPP introduce new U.S.

state privacy sections and a re-architected string structure designed to improve long-term flexibility. Updates to the Data Deletion Request Framework enhance clarity around token formats, strengthen key management and security guidance, and expand implementation options for extensibility. Feedback on both specifications may be submitted to support@iabtechlab.com or via GitHub during the public comment period, open until December 1st, 2025 . IAB Tech Lab has released for public comment updates to the Global Privacy Protocol (GPP) technical specifications.

The advertising technology ecosystem continues evolving to address privacy, measurement, and automation challenges facing the industry.

This update expands the framework’s coverage to reflect newly enacted U.S. state privacy laws and introduces proposed structural improvements designed to enhance scalability and interoperability across future releases.

The latest update adds four new U.S. state sections, Maryland , Indiana , Kentucky , and Rhode Island , all of which have recently enacted comprehensive privacy laws that go into effect in 2025 and 2026. These four new states introduce a re-architected string structure designed to future-proof them. Key proposed changes include: Mirroring the general GPP string structure, the proposal introduces a section header to define the order and inclusion of subsections within each state string.