Global Privacy Control

Take Control of Your Privacy

[Global Privacy Control @globalprivctrl]

California Attorney General settles with Disney for $2.75 million for not applying users' opt-out choices --- including GPC signals --- across different Disney services. https://t.co/48wNnqaBnY

[Global Privacy Control @globalprivctrl]

Governor Newsom has signed AB 566 requiring that web browsers offer users universal opt-out controls such as GPC.

The law goes into effect January 1, 2027. https://t.co/Clr2qwLezN

[Global Privacy Control @globalprivctrl]

The state of Colorado has released its proposed shortlist of signals that must be treated as binding universal opt-outs under the Colorado Privacy Act.

Global Privacy Control is one of three finalists under consideration. https://t.co/10grsUIUU5

[Global Privacy Control @globalprivctrl]

Mozilla announces that Firefox will ship the Global Privacy Control in settings starting in version 120. https://t.co/ld6JdGreTa

[Global Privacy Control @globalprivctrl]

https://t.co/S3ausS3dy3

[Global Privacy Control @globalprivctrl]

WTF is the global privacy control? https://t.co/EV6vkWq06e

[Global Privacy Control @globalprivctrl]

We have updated the GPC website to include an implementation guide, offering practical advice on how to configure your site to recognize and respond to GPC signals. https://t.co/IuYfAVKVqF

[Rob Bonta @AGRobBonta]

We continue to enforce this landmark law. We’re also serving notices of CCPA violation to a number of other large online retailers in CA.

These companies have 30 days to begin processing global opt-outs using tools like @globalprivctrl or face potential legal liability.

[Global Privacy Control @globalprivctrl]

First public enforcement action against a company for failure to adhere to Global Privacy Control requests. Sephora to pay $1.2 million in penalties.

[Rob Bonta @AGRobBonta]

NEWS: We reached a settlement with @Sephora for failing to disclose that it was selling consumer data, failing to honor requests to opt-out of sale, and failing to fix these violations.

I hope this sends a message to businesses not complying with the #CCPA: CADOJ is watching.

[Global Privacy Control @globalprivctrl]

Connecticut becomes the third state to enact privacy legislation that specifically mandates adherence to global opt-out signals.

[Global Privacy Control @globalprivctrl]

"Firefox joins other browsers to add a signal that sends mass ‘do not sell’ requests on your behalf" 👀https://t.co/7K7tzursLl

[Global Privacy Control @globalprivctrl]

Helpful 30-second video from @OneTrust showing how easy it is for their customers to configure their sites to honor the GPC signal.

[Global Privacy Control @globalprivctrl]

The CA AG has begun sending out enforcement letters requiring companies to honor #CCPA opt-out requests sent by #GPC-enabled browsers (from @KateKayeReports)

https://t.co/oFBeFMxpm5

[Global Privacy Control @globalprivctrl]

Great point from @robinberjon

“It’s important to understand how Web standards work: adoption precedes ratification. Calling GPC a “draft spec” may mislead people to think that its not applicable. That is not how this works.

[Global Privacy Control @globalprivctrl]

Strong signal (pun intended) from @SenBlumenthal urging @FTC to undertake rule-making for “global opt-out standards” including GPC.

We agree!

https://t.co/VObiGG9qkm

[Rep. Shelley Kloba @RepKloba]

Global privacy control is an important tool for consumers to protect their privacy. It is important for WA to follow California's lead on requiring companies to honor this. #consumerdataprivacy

[ashkan soltani @ashk4n]

What about helping consumers invoke their privacy rights via "Global Privacy Controls" as required under CCPA? @globalprivctrl

Hard to lead when you're sitting on the sidelines.

https://t.co/osStz4entq

[ashkan soltani @ashk4n]

Smart take from @GregBensinger @nytimes:
"Apple could take a big lead over its rivals by supporting a single setting at the browser level, known as the Global Privacy Control, to prohibit companies from selling your data to others" (But currently don't)

https://t.co/pG8pvjYUEj

[WIRED @WIRED]

“For years, companies have found ways to circumvent technical privacy protections. It’s basically an arms race. Technical tools are not enough. You need to have the force of law behind it.” https://t.co/9swaJe8Ggf

[ashkan soltani @ashk4n]

For years, companies have found ways to circumvent technical privacy protections yet “@Apple, despite its stated (and heavily advertised) commitment to privacy, has not incorporated @globalprivctrl into Safari"

Update on #GPC by @GiladEdelman: https://t.co/w3UPiYAlw2

[Global Privacy Control @globalprivctrl]

A better approach for platforms such as @Apple and @Google is to support “Global Privacy Controls” that require App Developers to honor consumers’ requests to not to ‘sell or share’ their info…

And importantly are *legally enforceable* by the State AGs/DPA in CA (and soon CO)

[ashkan soltani @ashk4n]

The effectiveness of these "privacy label" efforts are going to come down to how well the stated policies are enforced

For example, how will @Google guarantee that these data are "Collected but not Shared" beyond an honor system? (applies to Apple too)

That's the important Q!

[Global Privacy Control @globalprivctrl]

👀

[ashkan soltani @ashk4n]

IT BEGINS: CA @AGRobBonta’s Jul 19 enforcement update notes a recent action against a Consumer Electronics Retailer for failure to "process[] consumers’ requests to opt-out that were submitted via a user-enabled global privacy control” (ht @davidharbage)

https://t.co/bTg6nlveVE