Last Update: 10/27/2026 at 6:00 AM EST

U.S. Privacy Rights Enforcement

Coverage from AOL, Captain Compliance, and others

U.S. Privacy Rights Enforcement topic image

U.

S. privacy enforcement increasingly focuses on whether companies actually honor consumer choices—not merely whether their policies describe them. California’s CCPA and CPRA, along with laws in states such as Colorado, Connecticut, Oregon, and Texas, require businesses to process rights requests and recognize universal opt-out signals such as Global Privacy Control. Regulators have examined dark-patterned request flows, tracking tags that fire before consent, inadequate signal detection, and gaps between online forms and back-end systems. Cases involving Disney, Sephora, and Tractor Supply Company illustrate how failures to connect opt-outs with advertising and data-processing systems can lead to enforcement.

Looking Back
136 Day Timeline
Feb 13Mar 13Apr 10Apr 24May 22Jun 19
All Articles4 articles
Important2 articles · CI Score 60 and above
AOL
A multistate review explains Global Privacy Control enforcement: 12 states require honoring the do not sell or share browser signal, including California visible confirmation requirements effective Jan 1, 2026.
6/15/2026 • Regulation, Law & Enforcement • General
Captain Compliance
California regulators and other state attorneys general focus on opt-out and privacy rights execution, including dark-pattern design, identity verification burdens, and Global Privacy Control handling.
6/28/2026 • Consumer Privacy & Digital Rights • General
Interesting2 articles · CI Score 45–59
oregonlive / Gosia Wozniacka
Oregon residents can opt out of data sales and targeted advertising under the Oregon Consumer Privacy Act, with a universal opt-out tool available since January 1, 2026.
2/13/2026 • Consumer Privacy & Digital Rights • General
Privacy and Data Security Insights / Zenus Franklin
In September 2025, California, Colorado, and Connecticut regulators launched a joint sweep to test whether businesses honor Global Privacy Control universal opt-out signals for targeted advertising and personal information sales.
5/5/2026 • Consumer Privacy & Digital Rights • General