👀

A better approach for platforms such as Apple and Google is to support “Global Privacy Controls” that require App Developers to honor consumers’ requests to not to ‘sell or share’ their info… And importantly are *legally enforceable* by the State AGs/DPA in CA (and soon CO)

“For years, companies have found ways to circumvent technical privacy protections. It’s basically an arms race. Technical tools are not enough. You need to have the force of law behind it.” wired.trib.al/6TXCXRb

For years, companies have found ways to circumvent technical privacy protections yet “Apple, despite its stated (and heavily advertised) commitment to privacy, has not incorporated Global Privacy Control into Safari" Update on #GPC by Gilad Edelman: wired.com/story/global-p…

What about helping consumers invoke their privacy rights via "Global Privacy Controls" as required under CCPA? Global Privacy Control Hard to lead when you're sitting on the sidelines. globalprivacycontrol.org

Smart take from 𝚐𝚛𝚎𝚐 𝚋𝚎𝚗𝚜𝚒𝚗𝚐𝚎𝚛. The New York Times: "Apple could take a big lead over its rivals by supporting a single setting at the browser level, known as the Global Privacy Control, to prohibit companies from selling your data to others" (But currently don't) nytimes.com/2021/08/19/opi…

Global privacy control is an important tool for consumers to protect their privacy. It is important for WA to follow California's lead on requiring companies to honor this. #consumerdataprivacy

Strong signal (pun intended) from Richard Blumenthal urging FTC to undertake rule-making for “global opt-out standards” including GPC. We agree! blumenthal.senate.gov/imo/media/doc/…

"Firefox joins other browsers to add a signal that sends mass ‘do not sell’ requests on your behalf" 👀washingtonpost.com/technology/202…

Connecticut becomes the third state to enact privacy legislation that specifically mandates adherence to global opt-out signals.

We continue to enforce this landmark law. We’re also serving notices of CCPA violation to a number of other large online retailers in CA. These companies have 30 days to begin processing global opt-outs using tools like Global Privacy Control or face potential legal liability.

First public enforcement action against a company for failure to adhere to Global Privacy Control requests. Sephora to pay $1.2 million in penalties.

We have updated the GPC website to include an implementation guide, offering practical advice on how to configure your site to recognize and respond to GPC signals. globalprivacycontrol.org/implementation

Mozilla announces that Firefox will ship the Global Privacy Control in settings starting in version 120. groups.google.com/a/mozilla.org/…

The state of Colorado has released its proposed shortlist of signals that must be treated as binding universal opt-outs under the Colorado Privacy Act. Global Privacy Control is one of three finalists under consideration. coag.gov/uoom/

Governor Newsom has signed AB 566 requiring that web browsers offer users universal opt-out controls such as GPC. The law goes into effect January 1, 2027. gov.ca.gov/2025/10/08/gov…