In an effort to bolster digital privacy enforcement, three states are looking into businesses that may be ignoring browser-based signals meant to allow consumers to exercise their privacy rights—with potential implications for any U.S. company doing business online.

On Sept. 9, 2025, the attorneys general of California, Colorado and Connecticut, and the California Privacy Protection Agency (collectively, the “ Coalition ”) announced a coordinated “investigative sweep involving potential noncompliance with the Global Privacy Control, or GPC, an easy-to-use browser setting or extension that automatically signals to businesses a consumer’s request to stop selling or sharing their personal information to third parties.” The Coalition will contact businesses that fail to process consumer r

See Full Page