The Personal Data Portability Protocol
The open standard for personal data.
Lets personal data move freely, with consent. Decide what an app can see, for what, and for how long.
Become a SupporterWhat changes
Today
Habit Coach wants to access your account
- Read all your sleep, activity and health data
- Read your profile, contacts and location history
- Keep access until you revoke it
One button, everything the platform holds, for as long as the app wants. Nothing records what you agreed to, and turning it off means finding a settings page on someone else’s site.
With PDPP
- app
- Habit Coach
- source
- Sleep Tracker
- fields
- sleep_score, duration_min
not heart_rate, not location - range
- 1 Jun 2026 to 1 Sep 2026
- purpose
- personalisation
- expires
- 1 Dec 2026
Two fields, one purpose, three months, until a date you chose. It is recorded where you and the app can both see it, every request is checked against it, and ending it is one click. Ask for a third field, or a date outside the range, and the request is refused.
The Principles
- 01
Primacy of the individual.
Decisions about how information concerning a person is shared and used should rest with that person.
- 02
Specificity of access.
Access to personal data should be defined in terms of what is shared, for what purpose, and for how long, rather than granted in general terms.
- 03
A durable record.
What has been agreed should be recorded in a form that can be examined afterwards by the individual concerned and by the parties relying on it.
- 04
Enforcement by design.
Agreed limits should be applied automatically to each request, rather than depending on the continuing good conduct of the parties.
- 05
Reversibility.
Ending an arrangement should be as straightforward as entering into one.
- 06
Openness.
The specification should be published openly, implementable by any party, and operable without dependence on any particular provider.
Supporters
| Signatory | Type | Country | Version | Signed |
|---|---|---|---|---|
| Tim N. | Individual | United States | 1.0 | 2026-09-04 |
| Kalo | Company | Germany | 1.0 | 2026-09-05 |
| Annette T. | Individual | United States | 1.0 | 2026-09-08 |
| Art A. | Individual | Australia | 1.0 | 2026-09-08 |
| Claralynn N. | Individual | United Kingdom | 1.0 | 2026-09-08 |
| Elisabeth M. | Individual | United States | 1.0 | 2026-09-08 |
| Ghazal M. | Individual | United States | 1.0 | 2026-09-08 |
| Open Data Labs | Company | United States | 1.0 | 2026-09-09 |
| Sara S. | Individual | United Kingdom | 1.0 | 2026-09-09 |
| Spencer N. | Individual | United States | 1.0 | 2026-09-09 |
| Kahtaf A. | Individual | Canada | 1.0 | 2026-09-10 |
| Ton-Chanh L. | Individual | United States | 1.0 | 2026-09-10 |
| Vana Foundation | Company | Cayman Islands | 1.0 | 2026-09-10 |
Build on PDPP
One specification, a reference server you can run today, and three roles to build for. Pick yours.