FAQ
Rights Infrastructure · GDPR Article 88b

Simplify EU websites.
End cookie banners.

ADPC is an open, machine-readable signal for privacy choices (consent, refusal, withdrawal and objection). A digital signal can replace thousands of annoying banners and make users’ privacy choices simple and interoperable across websites and devices.

HTTP exchange
Request  GET / HTTP/1.1
ADPC     consent=personalized_news,
          withdraw=third-party_tracking
Response 200 OK
ADPC-P   purposes received ✓
ADPC — Advanced Data Protection Control
What is ADPC?

From cookie banners to effortless privacy choices.

Today you are asked about the same privacy decisions again – and again. The current “cookie banner” approach is exhausting for users, and generates a lot of friction for organisations. It is not suitable for future interfaces, like immersive services and AI-mediated environments.

ADPC only changes the communication channel through which choices are communicated. Instead of interface requiring hundreds of manual clicks, ADPC enables a standardised digital exchange between the service and the user-side software that represents the person covering all relevant GDPR rights, like consent, refusal, withdrawal and objection.

Developed by economics and privacy researchers and aligned with the GDPR and ePrivacy Directive, ADPC is not a simple opt-out flag that is the same for all services. It is a richer communication mechanism for a European fundamental-rights approach allowing to have specific choices per controller and purpose.

Open SourceProven technologySpecific (per controller and purpose)Simple to useSimple to implementReady for Article 88b
  ADPC — User Preference Panel
Analytics
Consented
Targeted Advertising
Refused
Personalisation
Withdrawn
Research & Development
Consented
Email Marketing
Refused

Collaborators, Supporters & Funders

TU Delft
AI Futures Lab — TU Delft
IT:U Austria
Inholland University of Applied Sciences
Future of Law — University of Innsbruck
Sustainable Computing Lab
netidee
Internet Stiftung Austria
noyb
FFG – Austrian Research Promotion Agency
Wirtschaftsagentur Wien
City of Vienna
Baycloud
Paris Lodron University of Salzburg (PLUS)
Signatu
Research Studios Austria
Soma Reality
Trinity College Dublin
AI Accountability Lab
TU Wien
MyData Global
Vienna University of Economics and Business (WU Wien)
How It Works

Proven technology.
All privacy choices covered.

For decades our devices exchange user preferences automatically. For example, browsers send websites language preferences or screen sizes to ensure users get the right page in the right format.

ADPC uses these existing digital communication channels (like header signals) to also communicate privacy choices. This way users can automatically send their preference to services – without effort, annoyance or friction.

Step 1

Each controller provides its privacy options

Each controller can provide a list of freely defined purposes for which it seeks to process user data. Controllers can choose from existing B2B purpose definitions or choose their own purposes. The user agent can load these lists with each visit.

Step 2

Users make their privacy choices

Users can make privacy choices manually or through automated agents like learning browser plug-ins. If users do not want to consent to processing, they can simply stay silent or send a reject signal. Consent or objections are actively communicated by the user agent.

Step 3

Effortless compliance

Organisations read the signal and apply user preferences without banners, annoyance or friction. Organisations benefit from a massively improved user experience, lower bounce rates and an increased legal certainty.

Why ADPC Is Different

Built for Europe.
Open to the world.

ADPC was designed around the actual requirements of EU data-protection law, not as a workaround. At the same time ADPC uses open concepts like “opt-in” and “opt-out” that are interoperable with most global privacy frameworks.

GDPR & ePrivacy choices fully covered

ADPC starts from EU data-protection logic built around consent, refusal, withdrawal and objection. This allows ADPC to make “cookie banners” fully redundant.

Fair and open communication

Both services and user-side tools participate in the exchange. Services express what they request; user-side software communicates back. Neither party nor a third party has a gatekeeper function. Controllers keep the power to set purposes and have individual consent for their service.

Specific Purposes

ADPC can communicate specific choices for specific purposes. It is not a global binary system like DNT or GPC. Users keep different preferences for analytics, advertising, personalisation and more.

Opt-In Compatible

Unlike signals designed purely for opt-out markets, ADPC supports consent as well as refusal, withdrawal and objection matching the full grammar of EU data-protection law.

Implementation-Ready

ADPC is publicly specified and already connected to existing website and CMP workflows. There is a working browser extension, WordPress integration and documented CMP-side support.

Future-Ready

ADPC extends beyond websites to IoT, mixed reality, children’s protection with guardian support, AI-assisted privacy management and rights-aware AI-based systems.

Try our sample implementations – already today!

ADPC works for people and for organisations.

Users are exhausted by “cookie banners”. Organisations are struggling with compliance that disrupts user flows. ADPC addresses both through a shared rights infrastructure. We have developed sample-implementations for users and organizations to show how simple implementing Article 88b can be.

For People

Take control of your digital rights.

Set your privacy preferences in your device and let your browser or trusted tool handle the rest. No more clicking through cookie walls on sites that already support ADPC.

  • Preferences set on your device
  • Granular, per-purpose, per-site control
  • Withdraw consent at any time – automatically communicated
  • No dark patterns or manipulative interfaces
  • Age-appropriate support for children and guardian-mediated choices

To test ADPC in action, you can install a plug-in for your browser:

Get the Browser Extension
For Organisations

Simplify compliance, reduce friction.

A common communication layer reduces duplicated compliance costs, improves legal certainty and makes trustworthy digital services easier to build.

  • Machine-readable, auditable rights records
  • Connect to existing CMP and consent workflows
  • Covers consent, refusal, withdrawal and objection under GDPR
  • Compatible with existing web infrastructure
  • Open standard – no vendor lock-in

To test ADPC in action, you can install a plug-in for WordPress (the most common CMS) or read the Specification:

Get the WordPress Plugin Read the Specification

Europe is moving toward machine-readable rights

Proposed GDPR Article 88b creates a legal pathway from rights, to standards, to interoperable implementation.

Art. 88b
GDPR Proposal
Open
Free Standard
Rights-First
EU Law Grammar
Explore Article 88b →

Build the rights layer with us.

ADPC is open, interdisciplinary and implementation-oriented. Join the community building a digital world where rights are not only written in law, but embedded in the architecture people use every day.