GPC & Consent Validation

Privacy & Consent Compliance

Prove you honour Global Privacy Control

GPC is legally recognised as an opt-out in 12 US states, including California, Colorado and Connecticut. Turning it on is not the same as honouring it. DataTrue loads your site in a browser that broadcasts a GPC signal on every request and confirms your tracking tags actually stop, and it can test the same thing in staging before you publish.

Start a free 30-day trial

The full platform, every feature, free for 30 days.

A DataTrue GPC check: the test loaded the site with the GPC signal on, and the console log confirms gpc=true.
Summary

Global Privacy Control (GPC) is a browser signal that tells a website a visitor is opting out of the sale or sharing of their data. A growing number of US states require sites to honour it. GPC testing loads your site in a browser that sends the signal and checks your tracking tags actually stop.

Trusted by analytics and privacy teams worldwide★★★★★ 4.6/5 on G2

What does GPC require now?

Nine US states directly require businesses to honour a browser opt-out signal such as GPC, and three more accept it through an authorized-agent rule. Regulators have acted on it. In 2022 Sephora agreed to pay $1.2 million in penalties to settle California Attorney General allegations that included not stopping third-party tracking when shoppers opted out through GPC. The CPPA ordered Tractor Supply to pay a $1.35 million fine, and its order says the site did not honor opt-out preference signals such as GPC until July 2024.

A browser with GPC turned on sends Sec-GPC: 1. If the site listens, ad tags stop. If it doesn't, ad tags keep firing.

For which states and laws apply, and the enforcement cases behind them, see the Privacy Resources and Enforcement Watch.

How does DataTrue test that tags stop?

DataTrue runs your test in a browser that broadcasts a GPC signal on every request, then checks which tags still fire and which stop. You get a timestamped, reproducible result you can keep on record.

DataTrue results for a GPC check: a run from the USA in Chrome, marked Success.

Can you test GPC before you publish?

Other tools test GPC too. ObservePoint and Tag Inspector both document it, so this isn’t where DataTrue claims to be alone. The difference is that DataTrue can run the same GPC test in staging before code ships, so a release that quietly breaks GPC handling is caught before it reaches a real visitor. See pre-publish tag testing and consent & cookie compliance.

◎

Nothing is installed on your site. DataTrue doesn’t ask you to add any script, tag or code to your pages, so there is nothing to remove if you stop.

Get evidence that your site honours GPC.

Start a free 30-day trial

Questions

What is Global Privacy Control?

A browser signal that tells a site a visitor is opting out of the sale or sharing of their data. A growing number of US states now require sites to honour it.

Is GPC legally required?

Yes, in a growing number of US states. For exactly which states and laws apply, see the Privacy Resources on whether your website tracking is legal.

How do you test GPC compliance?

Load the site in a browser that broadcasts a GPC signal and confirm tracking tags stop firing. DataTrue produces a timestamped, reproducible result.

Can GPC be tested before going live?

Yes. DataTrue can run the GPC test against a staging container as well as the live site.

Related: consent & cookie compliance, PII leak detection, pre-publish tag testing. Resources: global privacy control, consent verification, is your website tracking legal. Stakes: Enforcement Watch. Compare: DataTrue vs OneTrust.

30-day free trial

Put your tag and consent testing on a schedule

DataTrue runs coverage scans, journeys and consent checks on your live site, reads what each tag sends, and alerts your team when a result changes. There’s nothing of ours to install on your pages.

What DataTrue checks
  • Every page, with coverage scans
  • Scheduled runs, with alerts when a result changes
  • Full journeys, like checkout and signup, in each consent state
  • What each tag sent, field by field
Also in the full platform
  • PII detection with test personas
  • iOS and Android app testing
  • Pre-publish testing for GTM and Adobe Tags
  • REST API, plus Slack and Jira alerts
Start a free 30-day trial ★★★★★ 4.6/5 on G2

The full platform, every feature, free for 30 days.

A DataTrue monitoring dashboard showing page validation, HTTP status, load time and compliance results across scheduled runs
A scheduled monitoring run in DataTrue