IAB Tech Lab privacy standards update simplifies programmatic compliance for audio

The shift away from a fragmented state-by-state privacy model provides immediate relief for streaming services managing complex programmatic ad stacks. By standardizing how consent signals and deletion requests move through the ecosystem, these updates reduce the technical overhead required for audio publishers to remain compliant with proliferating U.S. regulations. For the broader streaming industry, this move toward uniform signaling is essential as privacy-conscious advertisers demand higher transparency and lower risk in automated buying environments. Watch for the final adoption of the Global Privacy Protocol revisions after the September 11 comment deadline to see how major DSPs integrate the simplified notice fields.

The IAB Tech Lab's Global Privacy Protocol sits at the center of a broader industry effort to replace fragmented state-by-state privacy compliance with a unified technical signal. The protocol currently supports privacy strings for the IAB Europe TCF, IAB Canada TCF, and U.S. state-specific strings for California, Virginia, Utah, Colorado, and Connecticut, alongside a US National Privacy String tied to the Multi-State Privacy Agreement. The IAB published guidance in May 2024 clarifying that only MSPA signatories or certified partners should transmit the US National String, warning that non-signatories risk material misrepresentation claims and potential enforcement by the FTC or state attorneys general. The proposed GPP updates now remove MSPA coverage for the previous state-by-state approach and eliminate Service Provider and Opt-Out Option Modes, consolidating the signaling model into a simpler structure.

Didomi, a consent management platform mentioned in the IAB Tech Lab announcement, has been actively aligning its product with evolving IAB frameworks. Didomi announced full compliance with TCF v2.3, which became mandatory on February 28, 2026, with the update rolling out automatically to customers ahead of the IAB's enforcement deadline. The company's VP of Product, Jeff Wheeler, endorsed the GPP and DDRF updates as reflecting real implementation experience. Didomi's support documentation details how the GPP framework maps consent fields across multiple jurisdictions, including configuration of notice and vendor list fields based on consumer consent signals. This positions Didomi as one of the CMP vendors most directly affected by the simplified notice and choice fields in the proposed GPP revision.

The Data Deletion Request Framework Version 2.0 complements the GPP changes by standardizing how deletion requests propagate through programmatic supply chains. The IAB Tech Lab's announcement noted that the updates were developed through its Global Privacy Working Group and Privacy Rearc Commit Group, reflecting cross-industry collaboration on implementation challenges. Anthony Katsur, CEO of IAB Tech Lab, stated that the updates aim to make compliance more consistent, transparent, and practical across the ecosystem. The public comment period runs through September 11, 2026, after which the finalized GPP specification will likely require CMP vendors and DSPs to update their integrations to support the removed fields and simplified notice structure.