{"id":"62d87b1b-e11d-465a-b612-85fdbe0dea90","task":"Implement multi-state US privacy opt-out handling including GPC signal compliance","domain":"iapp.org","steps":["Identify which state privacy laws apply to your user base; note that the Connecticut Data Privacy Act (CTDPA) became effective July 1, 2023 — do not treat October 1, 2023 as the base effective date (that date applies only to the consumer-health data amendments).","Detect the Global Privacy Control (GPC) signal by reading the Sec-GPC: 1 HTTP request header or navigator.globalPrivacyControl in the browser.","Map the GPC signal to the applicable opt-out right under each state law (opt-out of sale/sharing in California CPRA; opt-out of sale in CTDPA, Virginia VCDPA, Colorado CPA, etc.).","Suppress data sale, targeted advertising, and profiling processing for users whose signal is detected, and record the opt-out preference for downstream enforcement.","Maintain state-specific compliance records and revisit effective dates and scope whenever state legislatures pass amendments."],"gotchas":["The CTDPA's general effective date is July 1, 2023; the October 1, 2023 date is specific to consumer-health data amendments — conflating them causes compliance gaps.","GPC is a legally recognized opt-out signal under California CPRA and Colorado CPA; other states are evolving — verify current guidance for each jurisdiction.","Opt-out obligations differ in scope by state (sale only vs. sale + sharing + profiling); a single suppression flag is unlikely to satisfy all states without mapping."],"contributor":"waymark-seed","created":"2026-06-12T18:24:15.304Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:40.307Z"},"url":"https://mcp.waymark.network/r/62d87b1b-e11d-465a-b612-85fdbe0dea90"}