GPC signal detected but no visible confirmation displayed
This check looks for whether the site displays a visible message confirming that it has honoured a visitor's Global Privacy Control (GPC) signal, the browser-level setting that communicates an opt-out preference automatically. On this site, the browser's navigator.globalPrivacyControl signal is detected, but no confirmation such as 'Opt-Out Request Honored' or similar wording is shown to the visitor. California's CCPA (California Consumer Privacy Act) regulations, effective from 1 January 2026, require a visible confirmation that GPC has been processed, not just a silent backend response. This exact issue set the precedent for a well-publicised past enforcement settlement, so it's an area regulators are actively watching rather than a theoretical risk. Your developer should add a check for navigator.globalPrivacyControl being true, and when it is, render a visible 'Opt-Out Request Honored' notice somewhere on the page, such as near the footer or privacy settings. This is a small front-end change, roughly two hours, and can be tested by enabling GPC in a browser like Firefox or via a browser extension.
Why this matters
California's CCPA (California Consumer Privacy Act) regulations, effective from 1 January 2026, require a visible confirmation that GPC has been processed, not just a silent backend response. This exact issue set the precedent for a well-publicised past enforcement settlement, so it's an area regulators are actively watching rather than a theoretical risk.
How to fix it
Your developer should add a check for navigator.globalPrivacyControl being true, and when it is, render a visible 'Opt-Out Request Honored' notice somewhere on the page, such as near the footer or privacy settings. This is a small front-end change, roughly two hours, and can be tested by enabling GPC in a browser like Firefox or via a browser extension.