<aside> 🔎

Plain-language promise

Verify who is accountable before any identification is demanded. Then choose what happens next.

</aside>

GPRC explainer illustration

What is GPRC?

Global Privacy Rights Controls (GPRC) is a consumer-facing way to express, check, and enforce privacy rights in the digital world.

It is built on Digital Transparency Infrastructure (the market category) that enables privacy-enabling control (the outcome).

The problem it fixes

Most online “consent” happens after tracking has already started. That means the individual never gets a real choice.

GPRC flips the order:

1. The service must disclose who is accountable and what they intend to do.
2. The individual can decide whether to identify, share data, or refuse.
3. If anything changes, the individual must be re-notified.

The v1.2 focus: Transparency Privacy Rights Controls

This campaign focuses on v1.2 of DPTI: transparency privacy rights controls.

In practice, that means:

• Notice-first (no “surveillance first”)
• Meaningful choice (not checkbox theatre)
• Receipts that the individual can keep (sousveillance, not controller-only logs)

What you can do today

• Read the campaign: Campaign: Stop consent evidence laundering (DPV:27560)
• Read the research report: 0PN Labs — DPV Security and Privacy Considerations Report