Personal Data Portability Protocol Connect. An LF Decentralized Trust lab.
PDPP is an open, vendor-neutral standard for personal data portability: how a person authorises an application to read a specific, bounded slice of their data, and how a server enforces that grant. It builds on OAuth 2.0 and RFC 9396, and it composes with the Data Transfer Initiative (consent and authorisation here, transfer there).
- pdpp: the Personal Data Portability Protocol specification. Rendered at https://pdpp.dev
- data-connect: the reference implementation (desktop app)
- data-connectors: the connector library (Spotify, Google, Instagram, ChatGPT, Apple Health, GitHub, LinkedIn, Oura, and more)
- governance: how the lab is run
PDPP v0.1.0 is an LFDT Community Specification. PDP-Connect is a live LFDT Lab. Apache 2.0.
- Read the spec: https://pdpp.dev
- Working sessions (every other week on Thursday at 4PM Pacific, from 24 September 2026): LFDT Labs calendar
- Discord: https://discord.lfdecentralizedtrust.org (#pdp-connect)
- Mailing list: pdp-connect-discuss, for specification discussion and comment periods. Reading the archive needs no subscription.
- Good first issues: see the data-connect and data-connectors repos
Your data should be yours. Portability is the test. This is the layer that makes the test pass.