California Attorney General settles with Disney for $2.75 million for not applying users' opt-out choices --- including GPC signals --- across different Disney services. https://t.co/48wNnqaBnY
Governor Newsom has signed AB 566 requiring that web browsers offer users universal opt-out controls such as GPC.
The law goes into effect January 1, 2027. https://t.co/Clr2qwLezN
The state of Colorado has released its proposed shortlist of signals that must be treated as binding universal opt-outs under the Colorado Privacy Act.
Global Privacy Control is one of three finalists under consideration. https://t.co/10grsUIUU5
We have updated the GPC website to include an implementation guide, offering practical advice on how to configure your site to recognize and respond to GPC signals. https://t.co/IuYfAVKVqF
We continue to enforce this landmark law. We’re also serving notices of CCPA violation to a number of other large online retailers in CA.
These companies have 30 days to begin processing global opt-outs using tools like @globalprivctrl or face potential legal liability.
NEWS: We reached a settlement with @Sephora for failing to disclose that it was selling consumer data, failing to honor requests to opt-out of sale, and failing to fix these violations.
I hope this sends a message to businesses not complying with the #CCPA: CADOJ is watching.
The CA AG has begun sending out enforcement letters requiring companies to honor #CCPA opt-out requests sent by #GPC-enabled browsers (from @KateKayeReports)
https://t.co/oFBeFMxpm5
Great point from @robinberjon
“It’s important to understand how Web standards work: adoption precedes ratification. Calling GPC a “draft spec” may mislead people to think that its not applicable. That is not how this works.
Strong signal (pun intended) from @SenBlumenthal urging @FTC to undertake rule-making for “global opt-out standards” including GPC.
We agree!
https://t.co/VObiGG9qkm
Global privacy control is an important tool for consumers to protect their privacy. It is important for WA to follow California's lead on requiring companies to honor this. #consumerdataprivacy
What about helping consumers invoke their privacy rights via "Global Privacy Controls" as required under CCPA? @globalprivctrl
Hard to lead when you're sitting on the sidelines.
https://t.co/osStz4entq
Smart take from @GregBensinger@nytimes:
"Apple could take a big lead over its rivals by supporting a single setting at the browser level, known as the Global Privacy Control, to prohibit companies from selling your data to others" (But currently don't)
https://t.co/pG8pvjYUEj
“For years, companies have found ways to circumvent technical privacy protections. It’s basically an arms race. Technical tools are not enough. You need to have the force of law behind it.” https://t.co/9swaJe8Ggf
For years, companies have found ways to circumvent technical privacy protections yet “@Apple, despite its stated (and heavily advertised) commitment to privacy, has not incorporated @globalprivctrl into Safari"
Update on #GPC by @GiladEdelman: https://t.co/w3UPiYAlw2
A better approach for platforms such as @Apple and @Google is to support “Global Privacy Controls” that require App Developers to honor consumers’ requests to not to ‘sell or share’ their info…
And importantly are *legally enforceable* by the State AGs/DPA in CA (and soon CO)
The effectiveness of these "privacy label" efforts are going to come down to how well the stated policies are enforced
For example, how will @Google guarantee that these data are "Collected but not Shared" beyond an honor system? (applies to Apple too)
That's the important Q!
IT BEGINS: CA @AGRobBonta’s Jul 19 enforcement update notes a recent action against a Consumer Electronics Retailer for failure to "process[] consumers’ requests to opt-out that were submitted via a user-enabled global privacy control” (ht @davidharbage)
https://t.co/bTg6nlveVE