U.S. Privacy Rights Enforcement
Coverage from AOL, Captain Compliance, and others

U.
S. privacy enforcement increasingly focuses on whether companies actually honor consumer choices—not merely whether their policies describe them. California’s CCPA and CPRA, along with laws in states such as Colorado, Connecticut, Oregon, and Texas, require businesses to process rights requests and recognize universal opt-out signals such as Global Privacy Control. Regulators have examined dark-patterned request flows, tracking tags that fire before consent, inadequate signal detection, and gaps between online forms and back-end systems. Cases involving Disney, Sephora, and Tractor Supply Company illustrate how failures to connect opt-outs with advertising and data-processing systems can lead to enforcement.
