The IAB Multi-State Privacy Agreement (MSPA) creates a common framework for advertisers, agencies, technology vendors, and publishers for implementing U.S. state privacy laws. It will be updated to incorporate additional state privacy laws as they are enacted.

The MSPA functions as a “springing contract” that creates a contractual relationship amongst signatories as personal information flows between them for purposes of selecting and delivering a digital ad. All signatories to the MSPA agree to a consistent, transparent set of privacy terms. These terms supplement commercial contracts amongst signatories with required privacy terms and also fill the gaps where no contracts exist for certain data flows.

For publishers, use of the MSPA works in conjunction with IAB Tech Lab's Global Privacy Protocol (GPP). For advertisers, the MSPA does not require the use of the GPP, though they may use it if they choose to.

For your convenience, below are the archived, current, and upcoming MSPAs and their corresponding effective dates:
Upcoming Version Effective Dates
June 2, 2026
June 2, 2026
June 2, 2026
Current Version Effective Dates
July 7, 2025
January 1, 2026
January 1, 2026
Archived Versions Effective Dates
January 1, 2023 – February 15, 2024
February 15, 2024 – October 16, 2024
October 17, 2024 – July 6, 2025


The registration process itself must be completed online using the “Sign the MSPA” button below.



You can review the list of MSPA signatories and certified partners by pressing the “MSPA Identification List” button below.



Other MSPA Resources: