Permission Slip

Exploring how to enable consumers to meaningfully exercise their data rights.


On January 1, 2020, the California Consumer Privacy Act (CCPA) went into effect, giving California consumers important new privacy rights, including the right to access, delete, and stop the sale of their information.

The CCPA is the first comprehensive commercial privacy law in the United States. But CR’s research has revealed just how tough it can be for California consumers to use the data rights stipulated in the CCPA.

Our Approach

The CCPA has an “authorized agent” provision that allows a consumer to delegate a third party to exercise data rights on their behalf.

We want to help consumers meaningfully exercise their data rights, so we’re exploring the feasibility of authorized agent services. 

Permission Slip is envisioned as a mobile app that lets consumers set permissions for what companies can do with their data. Once permission is granted, Permission Slip will contact companies and facilitate data-related requests on your behalf.


  • Consumers better understand which companies have their data


  • Consumers set permissions for what companies can do with your data


  • Consumers exercise their digital rights more easily.


  • Consumers use their data to hold companies accountable

At-a-Glance Information

We are designing an experimental service, called Permission Slip, that helps consumers regain control of their personal information by making data rights actionable. Sign up to be notified when invites are available.

More From Digital Lab

Get involved with the Digital Lab

Stay up to date with all things Digital Lab