CPPA Proposes Amendments to Opt-Out Preference Signal Regulations
California's privacy agency has proposed amendments to CCPA regulations on opt-out preference signals, explicitly naming the Global Privacy Control as a signal that businesses engaged in selling or sharing personal data are required to honor.
Why this matters: GPC is the browser-level switch that is supposed to tell every website at once: do not sell my data. The problem has always been enforcement. If the CPPA locks GPC into the regulation by name, businesses lose wiggle room to claim they did not know it counted. That matters for ordinary people who set GPC once and assume it works. Right now, many companies ignore it. A named, mandatory standard puts the obligation where it belongs — on the business, not the user.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.