A browser or extension signal that tells websites the user opts out of the sale or sharing of personal data. California's attorney general and the CPPA treat GPC as a legally binding opt-out under the CCPA/CPRA, and Colorado, Connecticut, and other states require businesses to honor it. Sites detect it through the navigator.globalPrivacyControl property or the Sec-GPC header.
Cite this entry:
Agency Echelon. "Global Privacy Control." Agency Echelon Reference, reviewed September 2026. https://agencyechelon.com/reference/glossary/global-privacy-control/