GPC mentioned/supported but no visible 'Opt-Out Preference Signal Honored' display
Global Privacy Control (GPC) is a browser signal that tells websites a visitor wants to opt out of having their data sold or shared, sent automatically via a request header called Sec-GPC. This check looks for a visible on-page acknowledgement when that signal is received. On this site, GPC support is mentioned or detected, but no visible confirmation, such as an 'Opt-Out Preference Signal Honored' badge, is shown to the visitor.
Why this matters
If California's CCPA applies to you, regulators have indicated that honouring an opt-out preference signal such as Global Privacy Control should be visible to the user, for example by confirming that the opt-out has been applied, rather than being processed silently. Several US state regulators have also announced coordinated enforcement on GPC. Whether this applies to you depends on your size, the data you handle and where your visitors are, so check the current regulations and consult a privacy adviser.
How to fix it
Your developer and privacy lawyer should add a visible badge or notice, such as 'Privacy preference signal detected - opted out of sale/share', placed near the footer or inside the cookie banner, that appears whenever the site detects the Sec-GPC: 1 header. This is a small UI addition, typically 2 to 3 hours of combined development and legal review to get the wording right.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit