IAB Tech Lab, the global digital advertising technical standards-setting body, announced the release of the final Data Deletion Request Framework, following the conclusion of two extensive public comment periods. This milestone signifies an important step forward in handling consumer data privacy concerns within the digital advertising supply chain.
The Data Deletion Request Framework establishes a standardized mechanism for transmitting data deletion request signals throughout the digital advertising ecosystem. It provides provisions for validating request origins, ensuring requester authenticity, confirming receipt, and employing cryptographic signatures for authentication. By offering a holistic solution for handling data deletion requests, the framework aligns with the ‘Right to Delete’, a Data Subject Right (DSR) which is currently protected by the GDPR, 16 US state privacy laws, and additional privacy legislation, including Quebec Law 25.
“The industry has long struggled with the need for a standardized solution to manage data deletion requests,” said Jared Moscow, Director of Product, Privacy & Addressability, IAB Tech Lab. “The Data Deletion Request Framework addresses this challenge head-on, providing clear guidance and strategic insights into effectively handling these requests. Acting as the industry’s first signal for upholding consumer data subject rights, the Framework equips industry players with the technical tools necessary for efficiently managing data deletion requests.”
The Data Deletion Request Framework builds upon IAB Tech Lab’s portfolio of privacy compliance initiatives, including the Global Privacy Platform, the Accountability Platform, and the Privacy Taxonomy project. Collectively, these initiatives form a foundational framework for streamlining privacy regulatory compliance and advancing responsible data-handling practices in digital advertising.
Also Read: OpenX Announces International Expansion of TV by OpenX Alongside US Enhancements
Several organizations, including Google, Roku, Ketch, Sourcepoint, Dstillery, Mediavine, and Index Exchange, were highly active in shaping the framework during the development process. Their close involvement exemplifies the collaborative nature of this industry-wide effort.
Mary Xiaoyong Liu Wang, Senior Staff Software Engineer, Google: “The Data Deletion Request Framework addresses a longstanding industry challenge. This framework provides a helpful foundation for managing data deletion requests at scale, and reflects a collaborative commitment to upholding privacy standards.”
Kale Smith, Senior Product Manager, Global Privacy Infrastructure, Roku: “The Data Deletion Request Framework is a vital tool for managing privacy at scale. This standard facilitates smoother communication of deletion requests across the ecosystem, significantly simplifying compliance efforts for large organizations like ours.”
Jonathan Joseph, Head of Solutions, Ketch: “The Data Deletion Request Framework will bring much-needed efficiency to the entire ecosystem, helping to automate what has, to date, been a manual, arduous process. We will be adopting and integrating it into our product solutions so our clients can take advantage of the new Framework.”
Gabe Morazán, Product Director, Sourcepoint: “Sourcepoint believes that Data Deletion Request Framework is a significant step forward for the industry. This Framework will help vendors better communicate with each other which will foster more collaboration and communication.”
SOURCE: PRNewswire