Take Control of Your Privacy
Joined September 2020
- Tweets62
- Following1
- Followers6.5K
- Likes25
California Attorney General settles with Disney for $2.75 million for not applying users' opt-out choices --- including GPC signals --- across different Disney services. oag.ca.gov/news/press-releas…
Governor Newsom has signed AB 566 requiring that web browsers offer users universal opt-out controls such as GPC.
The law goes into effect January 1, 2027. gov.ca.gov/2025/10/08/govern…
The state of Colorado has released its proposed shortlist of signals that must be treated as binding universal opt-outs under the Colorado Privacy Act.
Global Privacy Control is one of three finalists under consideration. coag.gov/uoom/
Mozilla announces that Firefox will ship the Global Privacy Control in settings starting in version 120. groups.google.com/a/mozilla.…
WTF is the global privacy control? digiday.com/marketing/wtf-is…
We have updated the GPC website to include an implementation guide, offering practical advice on how to configure your site to recognize and respond to GPC signals. globalprivacycontrol.org/imp…
Global Privacy Control retweeted
We continue to enforce this landmark law. We’re also serving notices of CCPA violation to a number of other large online retailers in CA.
These companies have 30 days to begin processing global opt-outs using tools like @globalprivctrl or face potential legal liability.
First public enforcement action against a company for failure to adhere to Global Privacy Control requests. Sephora to pay $1.2 million in penalties.
NEWS: We reached a settlement with @Sephora for failing to disclose that it was selling consumer data, failing to honor requests to opt-out of sale, and failing to fix these violations.
I hope this sends a message to businesses not complying with the #CCPA: CADOJ is watching.
ALT SETTLEMENT WITH SEPHORA AS PART OF ONGOING ENFORCEMENT OF CCPA Penalties Required by Settlement Pay $1.2 million Injunctive Terms Allow for consumers to opt-out of the sale of personal info, including via the Global Privacy Control Clarify its online disclosures and privacy policy regarding how it sells consumer personal information Conform its service provider agreements to the CCPA's requirements Provide reports to the Attorney General relating to its sale of personal information and the status of its service provider relationships
Connecticut becomes the third state to enact privacy legislation that specifically mandates adherence to global opt-out signals.
This quoted post is unavailable.
"Firefox joins other browsers to add a signal that sends mass ‘do not sell’ requests on your behalf" 👀washingtonpost.com/technolog…
The CA AG has begun sending out enforcement letters requiring companies to honor #CCPA opt-out requests sent by #GPC-enabled browsers (from @KateKayeReports)
digiday.com/marketing/califo…
Great point from @robinberjon
“It’s important to understand how Web standards work: adoption precedes ratification. Calling GPC a “draft spec” may mislead people to think that its not applicable. That is not how this works.
Helpful 30-second video from @OneTrust showing how easy it is for their customers to configure their sites to honor the GPC signal.
Strong signal (pun intended) from @SenBlumenthal urging @FTC to undertake rule-making for “global opt-out standards” including GPC.
We agree!
blumenthal.senate.gov/imo/me…
Global Privacy Control retweeted
Global privacy control is an important tool for consumers to protect their privacy. It is important for WA to follow California's lead on requiring companies to honor this. #consumerdataprivacy
“For years, companies have found ways to circumvent technical privacy protections. It’s basically an arms race. Technical tools are not enough. You need to have the force of law behind it.” wired.trib.al/6TXCXRb
Global Privacy Control retweeted
What about helping consumers invoke their privacy rights via "Global Privacy Controls" as required under CCPA? @globalprivctrl
Hard to lead when you're sitting on the sidelines.
globalprivacycontrol.org/
Global Privacy Control retweeted
Smart take from @GregBensinger @nytimes:
"Apple could take a big lead over its rivals by supporting a single setting at the browser level, known as the Global Privacy Control, to prohibit companies from selling your data to others" (But currently don't)
nytimes.com/2021/08/19/opini…
Global Privacy Control retweeted
“For years, companies have found ways to circumvent technical privacy protections. It’s basically an arms race. Technical tools are not enough. You need to have the force of law behind it.” wired.trib.al/6TXCXRb
Global Privacy Control retweeted
For years, companies have found ways to circumvent technical privacy protections yet “@Apple, despite its stated (and heavily advertised) commitment to privacy, has not incorporated @globalprivctrl into Safari"
Update on #GPC by @GiladEdelman: wired.com/story/global-priva…
A better approach for platforms such as @Apple and @Google is to support “Global Privacy Controls” that require App Developers to honor consumers’ requests to not to ‘sell or share’ their info…
And importantly are *legally enforceable* by the State AGs/DPA in CA (and soon CO)
The effectiveness of these "privacy label" efforts are going to come down to how well the stated policies are enforced
For example, how will @Google guarantee that these data are "Collected but not Shared" beyond an honor system? (applies to Apple too)
That's the important Q!
👀
IT BEGINS: CA @AGRobBonta’s Jul 19 enforcement update notes a recent action against a Consumer Electronics Retailer for failure to "process[] consumers’ requests to opt-out that were submitted via a user-enabled global privacy control” (ht @davidharbage)
oag.ca.gov/privacy/ccpa/enfo…
