Global Privacy Control — what businesses need to know
Global Privacy Control (GPC) is a browser-based signal that lets users tell websites to stop selling or sharing their personal data automatically. Regulators in several jurisdictions have begun treating it as a legally recognized opt-out, putting businesses on notice that ignoring it may mean ignoring the law.
Why this matters: GPC is a small setting with real legal weight now. If your business collects or sells personal data, a user sending a GPC signal may already have opted out under state law — whether your team knows it or not. California has said so clearly. Other states are moving the same direction. This is not a technical edge case. It is a compliance gap hiding in your ad stack, your analytics, and your data partnerships. The businesses that treat GPC as optional are taking a position that regulators are starting to test.
Who should care: General readers · Privacy officers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.