Where the transparency work is carried

The work behind operational transparency is not carried in one place. Four places hold different pieces of it.

The Internet Transparency Code of Practice

A transparency by default code that organisations can adopt and regulators can inspect. It was introduced at CPDP Brussels on 20 May 2026, on a panel moderated by the Council of Europe. TCIEG supports its development. More on the code.

The TCIEG expert survey

Regulators and experts are asked what a notice and consent record needs to show, and where current standards meet or miss that need. The answers inform the code. Take the survey.

Kantara Initiative ANCR Working Group

Where the ANCR extension to ISO/IEC TS 27560:2023 is developed. Release 1, a v1.0 Release Candidate, is published in the Working Group’s repository. The Working Group is open to participants through Kantara.

Council of Europe, Convention 108+

The modernised Council of Europe data protection convention. The Internet Transparency Code of Practice aligns with its transparency principles. Convention 108+ is not yet in force.

How the pieces fit

The code builds on published standards. ISO/IEC 29100 defines the privacy principles. ISO/IEC 29184 carries them into the online notice and consent interaction. ISO/IEC TS 27560:2023 structures the record and the receipt. The ANCR extension anchors the record to a verifiable controller, an authoritative notice version and a history of changes. Other protocols and vocabularies connect alongside: privacy signals such as GPC and ADPC express preferences, DPV provides shared semantics, and OAuth, OpenID Connect, SD-JWT and digital wallets carry identity or authorisation information. The code supplies the notice, accountability and evidence context those technologies do not provide on their own.