Global Privacy Control (GPC): now required in 12 US states
As of January 1, 2026, California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon and Texas require honoring the browser's GPC signal as a valid opt-out — and as of that same date, silently processing it is no longer enough: a visible confirmation to the user is required. Consentio detects the signal automatically and treats it as a valid opt-out.
- ✓Detects the Global Privacy Control (GPC) browser signal with no manual setup.
- ✓12 states already require it in 2026: CA, CO, CT, DE, MD, MN, MT, NE, NH, NJ, OR and TX (Maryland and Minnesota from July 2026).
- ✓New 2026 requirement: visible confirmation to the user that their opt-out was honored — silent background processing is no longer enough.
- ✓Same banner under 9 KB for GDPR (EU), CCPA (California) and GPC across all 12 states.
Global Privacy Control FAQ
What is the Global Privacy Control (GPC) signal?
It's a signal your browser or an extension sends automatically to every site you visit, indicating you don't want your data sold or shared for targeted advertising — without having to reject it manually on every banner.
Which US states require honoring GPC?
As of January 1, 2026: California, Colorado, Connecticut, Delaware, Nebraska, New Hampshire, New Jersey, Oregon and Texas. Maryland and Minnesota join in July 2026. Montana already required it before. 12 states in total.
What changed on January 1, 2026 about handling GPC?
Before, silently processing the signal was enough. As of 2026, several of these states also require showing a visible confirmation (e.g. a notice or badge) that the visitor's opt-out was honored — not just applying it in the background.
Who does Connecticut's July 2026 threshold change affect?
Previously the law only applied to businesses processing data for 100,000+ Connecticut residents. From July 1, 2026 the threshold drops to 35,000, bringing many more SMBs and agencies with US clients into scope.
Does Consentio detect GPC automatically?
Yes. If the visitor's browser sends the signal, Consentio treats it as a valid opt-out with no extra configuration needed.
Is this legal advice?
No. This page explains what the tool does technically; the exact scope of each state law (thresholds, exemptions, what counts as a data "sale") should be assessed by a US privacy lawyer.
Related pages
Get your site compliant in 5 minutes
Create your account, configure the banner and paste the snippet. Real blocking + Consent Mode v2.
Free for 1 domain · No card · Pro from €9/month