Websites' Global Privacy Control Compliance at Scale and over Time
summary
Crawls of 11,708 sites track four signals—US Privacy String, GPP, OptanonConsent cookie, .well-known/gpc.json—to detect whether a site propagates a browser Global Privacy Control (GPC) opt-out to first and third parties. About a third of sites that indicate selling or sharing implement at least one signal, and full opt-out via all implemented strings sits at 44% (1,411/3,226) in Dec 2023 → 43% Feb 2024 → 45% Apr 2024. Quarterly longitudinal data and code are published; notifying large publishers improves compliance.
AI-written summary · about
chapters (10)
- 0:00Global Privacy Control intro
- 2:00How GPC works
- 3:04GPC implementation details
- 5:38Data sources & research method
- 7:50Detecting GPC compliance
- 9:19Initial GPC compliance rates
- 10:46GPC compliance trends
- 12:32Global Privacy Platform adoption
- 13:15Boosting GPC impact
- 14:19Future research & data
related talks
11mLessons Learned Deploying the Global Privacy Control to Millions of Customers
16mWhy Consent Fails in Practice: Lessons from Web Measurement Studies
01h 08mACADEMIC SESSION 2
01h 19mEffective Transparency and User Controls: Are We Close to a Breakthrough?
49mHow product-driven privacy ensures real compliance
49mWeb Side Story: A Privacy Odyssey through Tracking and Fingerprinting
20mAn Empirical Analysis of Data Deletion and Opt-Out Choices on 150 Websites
43mGDPR for web development