Global Privacy Control initiative

Global Privacy Control initiative is to help consumers exercise their privacy rights

Announcing Global Privacy Control: Making it Possible for Consumers to Easily Exercise Their “Do Not Sell” Rights Under CCPA

With the introduction of privacy regulations such as the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR), consumers have more rights to limit the sale and sharing of their personal data than ever before. CCPA, in particular, gives California residents a legal right to opt-out of the sale of their data and requires businesses to respect user preferences through a signal from their web browser communicating the consumer’s request to opt-out. Various website browsers will also allow users to download browser privacy extension to help communicate their data preferences with participating publishers.

While this is great progress, it doesn’t amount to much if it is hard for people to take advantage of their new rights. Today, there is no defined or accepted technical standard for how such a web browser signal would work. Without that, users don’t have an easy way to express their preferences.

Indeed, in his recent testimony before the US Senate, California Attorney General Xavier Becerra explained:

 One provision of our regulations intended to facilitate the submission of a request to opt-out of sale by requiring businesses to comply when a consumer has enabled a global privacy control at the device or browser level, which should be less time-consuming and burdensome. I urge the technology community to develop consumer-friendly controls to make exercise of the right to opt out of the sale of information meaningful and frictionless.

This effort, initially spearheaded by Ashkan Soltani (Georgetown Law) and Sebastian Zimmeck (Wesleyan University) now includes The New York TimesThe Washington PostFinancial TimesAutomattic ( & Tumblr)GlitchDuckDuckGoBraveMozillaDisconnectAbineDigital Content Next (DCN)Consumer Reports, and the Electronic Frontier Foundation (EFF).

In the initial experimental phase, individuals can download browsers and extensions from AbineBraveDisconnectDuckDuckGo, and EFF in order to communicate their “do not sell or share” preference to participating publishers. Additionally, we are committed to developing GPC into an open standard that many other organizations will support and are in the process of identifying the best venue for this proposal.

We look forward to working with AG Becerra to make GPC legally binding under CCPA. At the same time, we are exploring GPC’s applicability and functionality with regard to other similar laws worldwide, such as the GDPR. We are excited about the prospect of empowering people with an easy-to-use tool to exercise their privacy rights.

Original article: GPC

Share on facebook
Share on linkedin
Share on twitter
Share on pinterest
Share on print
Share on email

Latest Blog Posts

dpa gdpr

Data Protection Authorities (DPA)

Data Protection Authorities (DPA) Data Protection Authorities (DPA) are independent public authorities that supervise, through investigative and corrective powers, the application of the GDPR. They

Read More »

Zpracovává vaše společnost osobní údaje?

Zpracovávat vaše společnost osobní údaje fyzických osob, jako jsou:

  • Údaje zaměstnanců, zákazníků, uchazečů o zaměstnání nebo pacientů včetně:
    • Jméno nebo osobní identifikační číslo
    • Kontaktní údaje (e-mailová adresa, telefonní číslo, adresa)
    • Bankovní údaje, plat, údaje o pasu nebo jiné osobní údaje


Ar Jūsų įmonė renka ir tvarko fizinių asmenų asmens duomenis? 

Asmens duomenys gali būti:

  • Kliento, darbuotojo. paciento, kandidato į darbo vietą ir kt. 
    • Vardas ar asmens  numeris 
    • Kontaktinė informacija (el.pašto adresas, telefono numeris, adresas ir kt)
    • Banko sąskaitos  duomenys, atlyginimo dydis, paso duomenys ar bet kokia kita asmeninė informacija. 

Onko yrityksessäsi enemmän, kuin 250 työntekijää?

Kas teie ettevõte kogub ja töötleb isikuandmeid?

Kas teie ettevõte kogub ja töötleb füüsiliste isikutega seotud andmeid nagu näiteks:

Töötajate, klientide, tööle kandideerijate, patsientide:

  • Nimi, isikukood
  • E-posti aadress, telefoninumber, kodune aadress
  • Pangakontonumber, palgasumma, krediitkaardiandmed või mõnda muut tüüpi isiklikud andmed

Does your company collect any personal data?

Does your company collect and process any personal data of natural persons such as:

  • Employees, Customers, Job Applicants or Patients including:
    • Name or personal ID number
    • Contact details (Email address, Phone number, Address)
    • Bank details, Salary amounts, Passport details or any other personal data