Personal Data Portability Protocol (PDPP) is an open protocol for scoped access to personal data.

Apps and agents get fine-grained access to records and fields based on grants a user approves, enforced by the resource server on every request.

It profiles OAuth 2.0 and RFC 9396, the same pattern as SMART on FHIR and Open Banking.