What is Global Privacy Control (GPC)?

Global Privacy Control, or GPC, is a signal that allows people to communicate a privacy preference automatically through a supported browser or extension. This can reduce the need to submit the same privacy request separately on each website.

In California, businesses covered by the CCPA must honour GPC as a valid request to opt out of the sale or sharing of personal information. This includes certain disclosures for cross-context behavioural advertising, even when no money changes hands. The California Attorney General’s GPC guidance explains this requirement.

GPC does not mean “delete all my data” or prevent every type of data collection. Its effect depends on the applicable law and the processing activity. It also does not constitute consent for other uses of personal information.

For website operators, recognising the GPC signal means applying the relevant opt-out to covered processing. Simply displaying an opt-out message is not enough if the applicable sharing continues.

GPC should also be distinguished from Do Not Track (DNT). The two signals serve different purposes and have different levels of legal recognition.