Description
As of 2026, Global Privacy Control (GPC) is effectively mandatory in California, Colorado, Connecticut, Oregon, and additional states. Businesses must recognize and honor Universal Opt-Out Mechanism signals from browsers and extensions. Failure to honor GPC signals constitutes a violation in these states.
Requirements
- Implement Global Privacy Control signal recognition
- Test GPC signal handling across all web properties
- Ensure opt-out is applied when GPC signal is detected
- Document GPC compliance across all applicable states
- Monitor for additional state GPC mandates
Applicable To
Businesses subject to California privacy lawsBusinesses operating in Colorado, Connecticut, OregonOrganizations with consumer-facing web properties
Penalty Information
âš Violations subject to each state's enforcement regime, ranging from $2,500 to $10,000+ per violation.