Rights Infrastructure · GDPR Article 88b

Privacy rights need infrastructure,
not more pop-ups.

ADPC is an open, machine-readable communication layer for consent, refusal, withdrawal and objection. One exchange replaces thousands of banners — and makes rights communication interoperable across websites, devices and AI systems.

HTTP Header Exchange
Request:   GET /article HTTP/1.1
ADPC:      consent=cookies,
           withdraw=marketing

Response: 200 OK
ADPC-P:    purposes received ✓
01
User sets preferences once
02
Service receives machine-readable choice
03
Controller applies it
ADPC — Advanced Data Protection Control
What is ADPC

From cookie banners to
digital protection by architecture.

The current internet asks people to repeat complex privacy decisions again and again. That model is exhausting for users, costly for organisations, and poorly suited to connected devices, immersive services and AI-mediated environments.

ADPC changes the layer where rights are exercised. Instead of every service designing its own consent interface, ADPC enables a standardised exchange between the service and the user-side software that represents the person — covering consent, refusal, withdrawal and objection.

Developed by privacy researchers and aligned with the GDPR and ePrivacy Directive, ADPC is not a simple opt-out flag. It is a richer communication mechanism for European fundamental-rights infrastructure — the kind that proposed GDPR Article 88b is designed to enable.

Rights-First GDPR-Aligned Open Standard Article 88b
  ADPC — User Preference Panel
Analytics
Consented
Targeted Advertising
Refused
Personalisation
Withdrawn
Research & Development
Consented
Email Marketing
Refused
How It Works

One communication layer.
All rights covered.

ADPC replaces repetitive consent interfaces with a standardised exchange between services and user-side software. Consent, refusal, withdrawal and objection — all covered, once, across every site.

01

Set Preferences Through Trusted Tools

People manage privacy choices through browsers, operating systems, personal assistants or other user-side software they trust. Decide which purposes you consent to, which you refuse, and where you want to file an objection.

02

Service Receives a Machine-Readable Choice

When you visit a website or interact with a service, your preferences are communicated as structured, machine-readable signals before the page loads. No interaction required, no banner to click through.

03

Controllers Apply It — Auditably

Organisations read the signal and apply your preferences immediately — activating only what you approved and respecting every refusal, withdrawal and objection in a consistent, auditable way.

Why ADPC Is Different

Built for rights.
Built for the real web.

ADPC was designed around the actual requirements of EU data-protection law, not as a workaround or a market convenience.

Rights-First

ADPC starts from EU data-protection logic — not advertising-market convenience. Consent, refusal, withdrawal and objection are first-class concepts, not afterthoughts.

Bidirectional

Both services and user-side tools participate in the exchange. Services express what they request; user-side software communicates back. Neither party is the sole gatekeeper.

Purpose-Sensitive

ADPC can communicate specific choices for specific purposes — not only a global binary signal. Users keep different preferences for analytics, advertising, personalisation and more.

Opt-In Compatible

Unlike signals designed purely for opt-out markets, ADPC supports consent as well as refusal, withdrawal and objection — matching the full grammar of EU data-protection law.

Implementation-Ready

ADPC is publicly specified and already connected to existing website and CMP workflows. There is a working browser extension, WordPress integration and documented CMP-side support.

Future-Ready

ADPC extends beyond websites to IoT, mixed reality, children’s protection with guardian support, AI-assisted privacy management and rights-aware AI-based systems.

Find Your Path

It works for people
and for organisations.

Users are exhausted by cookie walls. Organisations are struggling with compliance that does not scale. ADPC addresses both through a shared rights infrastructure.

For People

Take control of your digital rights.

Set your privacy preferences once and let your browser or trusted tool handle the rest. No more clicking through cookie walls on sites that already support ADPC.

  • Preferences set once, applied through trusted user-side software
  • Granular, per-purpose, per-site control
  • Withdraw consent at any time — automatically communicated
  • No dark patterns or manipulative interfaces
  • Age-appropriate support for children and guardian-mediated choices
Get the Browser Extension
For Organisations

Simplify compliance, reduce friction.

A common communication layer reduces duplicated compliance costs, improves legal certainty and makes trustworthy digital services easier to build.

  • Machine-readable, auditable rights records
  • Connect to existing CMP and consent workflows
  • Covers consent, refusal, withdrawal and objection under GDPR
  • Compatible with existing web infrastructure
  • Open standard — no vendor lock-in
Read the Specification

Europe is moving toward machine-readable rights

Proposed GDPR Article 88b creates a legal pathway from rights, to standards, to interoperable implementation.

Art. 88b
GDPR Proposal
Open
Free Standard
Rights-First
EU Law Grammar
Explore Article 88b →

Build the rights layer with us.

ADPC is open, interdisciplinary and implementation-oriented. Join the community building a digital world where rights are not only written in law, but embedded in the architecture people use every day.