IAB Tech Lab seeks further feedback on enhanced data deletion framework

The IAB Tech Lab, the global standards-setting body for digital advertising, today opened a second public comment period for its Data Deletion Request Framework. This enhanced specification aims to streamline how companies handle consumer data deletion requests, a key aspect of evolving privacy regulations.

The updated framework arrives as data privacy rights gain momentum. Laws like California's "The Delete Act" (SB362) highlight the need for industry-wide standards supporting consumer control over their digital information.

Key Updates Based on Industry Feedback

The revised Data Deletion Request Framework reflects insights gathered during the initial public comment period:

• Secure Transmission: The framework now uses JSON Web Tokens (JWTs) to ensure secure and authenticated data deletion requests.
• Verification Made Easy: JSON Web Key Sets (JWKS) are incorporated to verify the legitimacy of requests, preventing unauthorized deletions.
• Clear Outcomes: Result codes and descriptions are included in responses to provide specific details about the success or failure of deletion requests.

Call for Participation

The IAB Tech Lab welcomes industry-wide feedback on the revised framework. Comments can be submitted to support@iabtechlab.com until April 22nd, 2024.