On September 9, the California Privacy Protection Agency (CPPA) and the Attorneys General of California, Colorado, and Connecticut announced a joint enforcement sweep targeting businesses that may be failing to honor consumer opt-out requests under state privacy laws. The joint effort centers on the Global Privacy Control (GPC), a browser setting that automatically signals to companies that a consumer does not want their personal information sold or shared.
The sweep underscores increasing state-level enforcement of consumer privacy protections, particularly where businesses fail to recognize or process opt-out signals. Regulators emphasized that refusal to honor GPC requests could amount to violations of state privacy statutes, including laws modeled after the California Consumer Priva