Global Privacy Control (GPC)

Global Privacy Control (GPC)

GPC compliance is no longer optional

As of January 1, 2026, 12 U.S. states require businesses that sell or share personal information or engage in targeted advertising to honor opt-out preference signals (OOPSs) or universal opt-out mechanisms (UOOMs).

California, Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Maryland, Minnesota, Oregon, and Texas

GPC Compliance Requirements

Technical & Operational compliance

Detect GPC signals

Apply opt-outs automatically across all users, browsers, devices, platforms, and offline, no verification or account creation required.

Support IAB Multi-state Privacy String (MSPS)

Ensure your company and all downstream recipients are signatories to the Multi-state Privacy Agreement or IAB-certified partners.

Configure exhaustive opt-out mechanisms

Cover all sales and sharing of personal information, reflecting the primary way your business interacts with consumers (website, mobile app, CTV, offline).

Monitor and audit continuously

Conduct ongoing scanning and internal communications to ensure opt-out mechanisms remain properly configured, functioning, and exhaustive.

UX COMPLIANCE

Make opt-out as easy as opt-in

Design symmetrical experiences with the same number of clicks, so opting out is never harder than opting in.

Keep disclosures clear and consistent

Ensure notices accurately reflect actual data collection, use, and sharing practices, and are explicit enough to cover anything outside reasonable consumer expectations.

Maintain audit trails

Document your compliance posture with records that demonstrate GPC signals are being honored correctly.

Review your CMP's GPC handling

Work with a UX expert to validate that your consent management setup meets GPC requirements end to end.

Recent fines

$2.75M

Largest CCPA settlement to date for failing to honor GPC signal.

Unlimited

California fines are per violation, per user. There is no cap.

10+

US states with active GPC enforcement requirements right now.

Trusted by teams who can't afford to get this wrong

Didomi handles GPC automatically. So you don't have to.

Automatic GPC signal detection

Didomi reads the GPC signal from the user's browser in real time. No manual setup or custom code required.

Instant opt-out enforcement

Data sharing and targeted advertising stops immediately when a GPC signal is detected. Fully automated.

Visible confirmation display

Meets California's new 2026 requirement to display an "Opt-Out Request Honored" confirmation to users.

Full audit trail

Every GPC signal is logged with timestamp, user ID, and response, ready for regulatory proof on demand.

Multi-state coverage, one config

Highly responsive, guided onboarding, technical setup support and continuously improving your consent performance.

"The solution is very user friendly and simple. Without any know how about the platform you can easly setup everything in a very short time. Even for the integration with the digital platform is very easy. But, if you have any doubts or issue, you can contact directly the support that is very fast and collaborative."

Marco B.IT Digital Solution Senior Manager
"The support provided by the entire team was a highlight of my experience with Didomi.
The support is remarkable. Just for that, it should convince anyone to choose them."

Philippe D.Product Owner
"We switched from OneTrust to Didomi because of its easier implementation and better value for money, and we are very happy with the switch. The initial setup was very easy and made sense from a technical perspective."

Veronika S.Business Analyst

Support you can rely on when it matters

Didomi support is built for high traffic media environments, where issues can’t wait.

You work directly with dedicated specialists who understand media monetization, platform requirements, and regulatory pressure, who will stay with you through setup, migration and ongoing changes.

Ease of Use
Average: 9.0
Quality of support
Average: 9.0
Ease of setup
Average: 8.6

GPC Enforcement Is Happening Now. Let's Get You Covered.

Book a 30-minute demo. We'll walk through your website setup, show you exactly how Didomi handles GPC signals, and give you a compliance assessment for your specific situation.

Demo includes:

How Didomi detects GPC signals

Integration options for your existing stack (JS, SDK, API)

Compliance assessment for your specific state requirements

Audit trail and reporting walkthrough

Valid number

Frequently Asked Questions (FAQ)

Does Didomi support all states that require GPC?

How long does implementation take?

We already have a consent banner, does it cover GPC?

What happens when a new state adds GPC requirements?

Is there a free trial?

Related resources

Blog post

Global Privacy Control (GPC): Everything you need to know for 2026 (and beyond)

Learn more