--- title: "Global Privacy Control: A New Requirement for Compliance - TrueVault" description: Global Privacy Control is making advertising opt-outs easier than ever for consumers, and failure to implement it on your website may lead to fines. image: https://safe.truevault.com/hubfs/Pubmats/global-privacy-control.png --- - [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa) - [GDPR Compliance](https://safe.truevault.com/gdpr-guide) - [HIPAA](https://safe.truevault.com/learn/hipaa) - [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-pii) - [PHI](https://safe.truevault.com/protected-health-information) - [Resources](https://safe.truevault.com/learn/?hsLang=en) - Login [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) - [Resources](https://safe.truevault.com/learn/?hsLang=en) - Login - Login - [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) - [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) - [Data Privacy Essentials](https://safe.truevault.com/learn/essentials/) # Global Privacy Control: A New Requirement for Compliance ![global-privacy-control](https://safe.truevault.com/hubfs/images/global-privacy-control.jpg "global-privacy-control")   A simple browser signal may have the power to reshape online privacy.  Most websites and apps are now collecting, processing, and swapping information about their users in the blink of an eye. Laws such as the [California Consumer Privacy Act](https://www.truevault.com/ccpa-guide?hsLang=en) (CCPA) seek to address this by creating a new set of privacy rights regarding consumers’ personal data, but exercising those rights can be cumbersome in practice. Enter Global Privacy Control (GPC), which allows website visitors to exercise some of their privacy rights automatically. ## What Is Global Privacy Control? The idea behind GPC is simple: consumers can enable an option in their web browser that sends a signal to every site they visit indicating their privacy preferences. If GPC is turned on and the site recognizes the signal, the visitor is automatically opted out of targeted advertising and anything that could be considered “[selling](https://www.truevault.com/consumers/ccpa/what-constitutes-a-sale-of-personal-information?hsLang=en)” their personal information. Global Privacy Control [was developed](https://globalprivacycontrol.org/) in response to the passing of the CCPA, which contemplated the possibility of a universal opt-out signal. Though it is far from universally adopted, GPC is now available on Firefox and several other privacy-centric browsers, and is recognized by major publishers like the New York Times and the Washington Post. ## Are Businesses Required to Recognize GPC? Depending on which privacy laws apply to a particular business, it may be required to recognize the GPC signal as a valid request to opt out. ### CCPA According to the latest regulations from the California Privacy Protection Agency, all businesses required to comply with the CCPA must treat “opt-out preference signals” as valid requests to opt out of the sale or sharing of personal information. (“Sharing” in this context means the disclosure of personal information for cross-context behavioral advertising.) While GPC is not specifically named in the regulations, it has been [mentioned favorably](https://twitter.com/AGBecerra/status/1313884873413726208) on multiple occasions by the California Attorney General and is almost certain to be considered an opt-out preference signal. Businesses that fully process opt-outs via GPC in a frictionless manner are exempt from having to include a “Do Not Sell or Share My Personal Information” link on their website. “Frictionless” means the business may not charge a fee, change the user’s experience on the site, or display any pop-up or notification in response to the opt-out.  However, this exemption only applies if the GPC signal opts the consumer out of *all* selling or sharing practices without requesting additional information. ### Virginia Consumer Data Protection Act [Virginia’s privacy law](https://www.truevault.com/resources/virginia/what-is-the-virginia-consumer-data-protection-act?hsLang=en) does not currently require businesses to respond to the GPC signal. ### Colorado Privacy Act Businesses have one year from the [Colorado law's](https://www.truevault.com/resources/colorado/cpa-introduction?hsLang=en) effective date to implement GPC and recognize any “user-enabled universal opt-out mechanism” as a valid request to opt out of targeted advertising. ### Utah Consumer Privacy Act [Utah’s privacy law](https://www.truevault.com/blog/utah-consumer-privacy-act?hsLang=en) does not currently require businesses to respond to the GPC signal. ### Connecticut Data Privacy Act Businesses have 18 months from the [Connecticut law's](https://www.truevault.com/blog/connecticut-passes-privacy-law?hsLang=en) effective date to implement GPC and recognize “opt-out preference signals” as valid requests to opt out of targeted advertising. ### GDPR The [GDPR’s](https://www.truevault.com/learn/gdpr/what-is-the-gdpr?hsLang=en) legal framework is different from the US data privacy laws, so GPC is not an exact fit for submitting a data subject request. For example, there is no specific right to opt-out of targeted advertising. Also, under the ePrivacy Directive (the “Cookie Law”), websites may not place marketing cookies on a person’s computer without first obtaining consent. ## Implementing GPC at Your Business Privacy compliance is complicated, and implementing Global Privacy Control isn’t as simple as flipping a switch (just ask [Sephora](https://www.truevault.com/blog/sephora-fined-for-ccpa-violations?hsLang=en)). It needs to fit into a larger compliance strategy that includes creating a data map, determining which of your information practices amount to “selling or sharing,” and figuring out which of those practices can be linked to the GPC signal. TrueVault simplifies privacy compliance so that small and medium-sized businesses can handle it on their own. Designed by attorneys, TrueVault is a SaaS platform that guides you every step of the way, from onboarding vendors to adding GPC code to your website. [Contact our team](https://www.truevault.com/contact-us?hsLang=en) to learn more. [![Schedule Call](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/4693513/949d85da-b649-4822-b380-0922b22c3b60.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/4693513/949d85da-b649-4822-b380-0922b22c3b60) **Disclaimer:** This content is provided for general informational purposes only and does not constitute legal or other professional advice. Without limiting the foregoing, the content may not reflect recent developments in the law, may not be complete, and may not be accurate or relevant in an applicable jurisdiction. This content is not a substitute for obtaining legal advice from a qualified licensed attorney in the applicable jurisdiction. The content is general in nature and may not pertain to specific circumstances, so it should not be used to act or refrain from acting based on it without first obtaining advice from professional counsel qualified in the applicable subject matter and jurisdictions. - ON THIS PAGE - [What Is Global Privacy Control?](https://safe.truevault.com/learn/essentials/global-privacy-control#what-is-gpc) - [Are Businesses Required to Recognize GPC?](https://safe.truevault.com/learn/essentials/global-privacy-control#required-to-recognize-gpc) - [Implementing GPC at Your Business](https://safe.truevault.com/learn/essentials/global-privacy-control#implementing-gpc) ##### Get compliant today Our attorney-designed software will step-by-step guide you through the compliance process from start to finish. [Request a Demo](https://www.truevault.com/contact-us?hsLang=en) ### Company - [Blog](https://safe.truevault.com/blog) - [Contact Us](https://safe.truevault.com/contact-us-2019) - [Careers](https://truevault.workable.com) - [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/) ### Developers - [Patterns](https://safe.truevault.com/patterns) - [Documentation](https://docs.truevault.com/) - [Quick Start Guide](https://safe.truevault.com/quick-start-guide) - [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure) - [API Overview](https://safe.truevault.com/api-overview) ### Latest Posts ### Contact Us 201 Mission Street, 12th Floor San Francisco, CA 94105 Email: [hello@truevault.com](mailto:hello@truevault.com) 2024 © All Rights Reserved.  [Privacy Policy](https://privacy.truevault.com/privacy-policy)  |  [Terms of Use](https://www.truevault.com/legal/truevault-terms-of-use?hsLang=en)  |  [Supplemental Terms](https://www.truevault.com/legal/truevault-supplemental-terms-of-use?hsLang=en) | [California Privacy Notice](https://privacy.truevault.com/privacy-policy#california-privacy-notice)