### [What Is Global Privacy Control (GPC)? How to Honor It in WordPress](https://wpconsent.com/how-to-implement-global-privacy-control-support-in-wordpress/) **Published:** October 8, 2026 **Author:** Alvin Collin **Content:** TL;DR: Global Privacy Control (GPC) is a browser setting that asks websites not to sell a visitor’s data or use it for targeted ads. As of October 2026, 12 US states make opt-out signals like GPC binding for businesses that meet their test. WPConsent’s free plugin can honor it, as one part of your opt-out setup. Some of your visitors have already told websites not to sell or share their data before they reach your site. They did it in their browser settings. Brave, DuckDuckGo, and Firefox can all send a signal called Global Privacy Control (GPC). It tells every website the visitor lands on, “don’t sell or share my data.” This is what GPC is: - It’s a privacy setting in the visitor’s browser. They turn it on once, or their browser has it on already. - It reaches your site before your cookie banner loads, so the visitor never has to click anything. For you as a site owner, it raises three questions: - Does the law expect your site to honor this signal? - What changes on your site when you do? - Does your cookie plugin listen for GPC? In most [WordPress cookie consent plugins](https://wpconsent.com/best-wordpress-cookie-consent-plugins/), honoring GPC is a setting you have to turn on, and some only offer it on a paid plan. Some, like WPConsent, include it in [the free version](https://wpconsent.com/wpconsent-free-vs-pro/), and you switch it on with a toggle button. In this guide, we’ll answer all these questions for you. We’ll show you how to turn on GPC support with the free version of WPConsent, what changes once it’s on, and how to check that it’s working. Key Takeaways - GPC is set before your page loads, so your banner’s Reject button can’t stand in for it. - As of October 2026, 12 US states make opt-out signals like GPC binding, but only for businesses that pass their test, which usually means selling data or running ad pixels at a certain size. - The law treats GPC as an opt-out of selling data and targeted ads. - GPC is available in the free version of WPConsent. Once enabled with a toggle, WPConsent declines every non-essential category, analytics included. - You can check that it works in Firefox or Brave in a couple of minutes. Use the table of contents below to navigate this article. - [What Is Global Privacy Control (GPC)?](#aioseo-what-is-global-privacy-control-gpc) - [Which Browsers Send GPC?](#aioseo-which-browsers-send-gpc) - [How Is GPC Different From Do Not Track?](#aioseo-how-is-gpc-different-from-do-not-track) - [Does Your WordPress Site Have to Honor GPC?](#aioseo-does-your-wordpress-site-have-to-honor-gpc) - [The 12 States That Make Opt-Out Signals Binding](#aioseo-the-12-states-that-make-opt-out-signals-binding) - [A Three-Part Test That Works in All 12](#aioseo-a-three-part-test-that-works-in-all-12) - [1. People who live in one of these states use your site.](#aioseo-1-people-who-live-in-one-of-these-states-use-your-site) - [2. You sell visitors' data or use it for targeted ads.](#aioseo-2-you-sell-visitors-data-or-use-it-for-targeted-ads) - [3. You meet that state's size test.](#aioseo-3-you-meet-that-states-size-test) - [What Happens if a Covered Site Ignores GPC?](#aioseo-what-happens-if-a-covered-site-ignores-gpc) - [GPC vs Your Banner's Reject Button vs a Do Not Sell Link](#aioseo-gpc-vs-your-banners-reject-button-vs-a-do-not-sell-link) - [How to Honor GPC in WordPress with WPConsent (Free)](#aioseo-how-to-honor-gpc-in-wordpress-with-wpconsent-free) - [What Honoring GPC Changes on Your Site](#aioseo-what-honoring-gpc-changes-on-your-site) - [How to Check GPC Is Working on Your Site](#aioseo-how-to-check-gpc-is-working-on-your-site) - [Send a GPC Signal From Your Browser](#aioseo-send-a-gpc-signal-from-your-browser) - [FAQs: Global Privacy Control](#aioseo-faqs-global-privacy-control) - [Turn On Global Privacy Control Support in WordPress](#aioseo-turn-on-global-privacy-control-support-in-wordpress) --- ## What Is Global Privacy Control (GPC)? [Global Privacy Control (GPC)](https://wpconsent.com/global-privacy-control/) is a browser setting that tells websites a visitor wants to opt out of having their personal data sold or shared. The visitor turns it on once in their browser. From then on, their browser sends the GPC signal to the websites they visit, so those sites can act on their preference automatically. That means they don’t need to find your privacy settings, [open a Do Not Sell page](https://wpconsent.com/do-not-sell-page-wordpress/), or click **Reject** on your [cookie banner](https://wpconsent.com/how-to-add-a-cookie-consent-banner-on-your-wordpress-website/). **Reject** is a choice the visitor makes when your site presents the cookie banner. GPC is a preference they’ve already set in their browser, so your site can honor it as soon as they arrive. ### Which Browsers Send GPC? **Brave and DuckDuckGo send GPC by default.** **Firefox** also supports GPC. On desktop, you can find the setting under **Settings » Privacy & Security**, and Firefox sends GPC automatically in private windows. **Chrome, Safari, and Edge** don’t currently have a built-in GPC setting. Visitors using those browsers need an extension, such as [Privacy Badger](https://privacybadger.org/), DuckDuckGo Privacy Essentials, or OptMeowt, to send the signal. Starting January 1, 2027, California law (AB 566) requires browser makers to offer an opt-out signal setting. The setting doesn’t have to be on by default, but it gives more visitors the option to send GPC from their browser. ### How Is GPC Different From Do Not Track? Do Not Track was an older browser setting with the same idea. No law required sites to respect it, so most of them didn’t. GPC is different because state laws now point at signals like it. Those laws don’t name GPC directly. They talk about an “opt-out preference signal” or a “universal opt-out mechanism.” Colorado’s Attorney General keeps an official list of recognized signals, and GPC is the one signal on it. California is moving the same way. In August 2026, its privacy agency (the CPPA) voted to start work on rules that would name GPC. Nothing is final yet. --- ## Does Your WordPress Site Have to Honor GPC? Not necessarily. GPC applies when a state privacy law covers your site and requires businesses to honor opt-out preference signals. These privacy laws can apply to bigger companies and smaller WordPress sites. But not every site with a US visitor has to honor GPC. So you need to know whether these laws cover your site. ### The 12 States That Make Opt-Out Signals Binding As of October 2026, these 12 states require businesses they cover to honor opt-out preference signals like GPC: - California - Colorado - Connecticut - Delaware - Maryland - Minnesota - Montana - Nebraska - New Hampshire - New Jersey - Oregon - Texas Vermont is next. Its law is set to require it from [January 1, 2028](https://chambers.com/articles/preparing-for-vermont-s-new-privacy-framework-understanding-s-71-act-145-2). ### A Three-Part Test That Works in All 12 Each state has its own law, but they share the same basic shape. Your site is usually covered when all three of these are true. #### 1. People who live in one of these states use your site. Every one of these laws protects that state’s residents, and since most sites can’t tell where a visitor lives, many simply honor the signal for everyone. #### 2. You sell visitors’ data or use it for targeted ads. California calls this “selling or sharing” data. Sharing in this instance means using data for ads across other sites and apps. The other 11 states say “sale” and “targeted advertising.” For most WordPress sites, the usual trigger is an ad or retargeting pixel. The [Facebook pixel](https://wpconsent.com/facebook-pixel-consent-mode-in-wordpress/) and [Google Ads remarketing tags](https://wpconsent.com/block-google-ads-scripts-until-consent-in-wordpress/) are common examples. #### 3. You meet that state’s size test. There’s no single number. Here’s how the tests differ: - **Resident counts.** Most states count how many of their residents’ data you handle in a year: - **100,000 residents:** Colorado, New Jersey, Minnesota, and Oregon - **35,000 residents:** Connecticut, New Hampshire, Maryland, and Delaware - **25,000 residents:** Montana - Delaware’s count drops to **10,000 on January 1, 2027**. - The count is lower if you also earn money from selling data. - **Small-business exemptions.** Texas and Nebraska don’t use a count. They exempt small businesses as the U.S. Small Business Administration defines them. Minnesota uses both its count and that exemption. In all three, small businesses still need consent to sell sensitive data. - **Any size.** Connecticut covers any business that processes sensitive data or offers data for sale. Colorado’s biometric data rules also apply at any size. - **California.** The CCPA covers a business if it meets any of these thresholds: - **More than $26,625,000 in annual revenue** (the figure in effect since January 1, 2025) - **100,000 or more consumers or households** whose personal data it buys, sells, or shares in a year - **At least 50% of its annual revenue** comes from selling or sharing personal data - Our [CCPA guide for WordPress](https://wpconsent.com/ultimate-guide-to-wordpress-and-ccpa-compliance/) covers California’s law in more detail. Nonprofits are exempt in California, Connecticut, Texas, Nebraska, and New Hampshire. The other seven states cover them. For example, a small blog with modest traffic and no advertising or retargeting pixels will often fall outside these laws. A growing store that runs retargeting ads to visitors across the US may meet one or more of the thresholds. Whether your site is covered depends on the state, your business, your traffic, and how you use personal data. If you’re unsure whether the rules apply to you, a lawyer who understands your business can help you work that out. ### What Happens if a Covered Site Ignores GPC? If your site is covered by a privacy law and you ignore GPC signals, you could face penalties. California is the clearest example so far. Its regulators have already penalized several companies over how they handled consumer opt-out requests, including GPC signals: - Sephora paid $1.2 million in August 2022, in a settlement with California’s Attorney General. - Healthline paid $1.55 million in July 2025, also with the Attorney General. - Tractor Supply paid $1.35 million in September 2025, in an order from the CPPA. - Disney paid $2.75 million in February 2026, with the Attorney General. - PlayOn paid $1.10 million in March 2026, with the CPPA. Under California law, fines can reach $2,663 per violation, or $7,988 for intentional violations or those involving consumers under 16. These amounts took effect on January 1, 2025, and the [CPPA adjusts them](https://cppa.ca.gov/regulations/cpi_adjustment.html) every two years. --- ## GPC vs Your Banner’s Reject Button vs a Do Not Sell Link If your site already has a cookie banner with a **Reject** button or a [Do Not Sell page](https://wpconsent.com/do-not-sell-page-wordpress/), you might wonder what GPC adds. At first glance, GPC might seem like another way for visitors to say no to data collection. Let’s look at each one. | | GPC signal | Your banner’s Reject button | A Do Not Sell link | |---|---|---|---| | Who starts it | The visitor, once, in their browser | The visitor, on your site, when your banner asks | The visitor, by opening your page and sending a request | | When it happens | Before your page loads | After your banner appears | Whenever the visitor goes looking for it | | What it covers | Under these laws: selling their data and targeted ads | The cookie categories the visitor declines | The sale and sharing of their data, including data you share outside the browser, such as an email list | | Do you still need it? | Yes, if your site is covered by one of the 12 laws | Yes, for every visitor who doesn’t send GPC | Usually yes, see the FAQ below | A covered site can’t wait for a GPC visitor to click Reject. Under these laws, the signal itself is the opt-out. And a Do Not Sell link doesn’t replace the signal. They work side by side. --- ## How to Honor GPC in WordPress with WPConsent (Free) [WPConsent](https://wpconsent.com/) works with both opt-in and opt-out consent setups, so you can use GPC alongside your existing consent model. It can also recognize and honor GPC signals on your WordPress site, and GPC support is included in the free version. When GPC support is enabled, WPConsent handles the browser signal through the same consent system instead of asking the visitor to make the choice again. Check out our [WPConsent review](https://wpconsent.com/wpconsent-review/) for more details. One thing to know before you start: this also turns off analytics cookies for GPC visitors. We’ll explain what that means for your numbers right after the setup. It takes three steps to turn on GPC support with WPConsent. ### Step 1: Install and Activate WPConsent First, install the [free WPConsent plugin](https://wordpress.org/plugins/wpconsent-cookies-banner-privacy-suite/). In your WordPress dashboard, go to **Plugins » Add New Plugin**. Search for “WPConsent,” then click **Install Now** and **Activate**. ![WordPress Add Plugins screen with wpconsent typed in the search box and the WPConsent plugin card first in the results.](https://wpconsent.com/wp-content/uploads/2026/10/install-wpconsent-free-plugin.png)*Search for WPConsent, then click Install Now. Once it installs, the same button changes to Activate.* After activation, WPConsent opens a setup wizard that scans your site for cookies and helps you set up your banner. ![WPConsent setup wizard Scan Results screen listing detected services, including Google Analytics and the Facebook Pixel, with script blocking ticked.](https://wpconsent.com/wp-content/uploads/2026/03/wizard-configure-1024x674.png)*The WPConsent wizard shows the scan results of the services it detected that may be using cookies on your website.* Our guide on [finding which cookies your site uses](https://wpconsent.com/how-to-find-which-cookies-your-wordpress-site-is-using/) explains the scan. ### Step 2: Turn On Respect Global Privacy Controls Next, go to **WPConsent » Settings** and click the **Advanced** tab. Scroll down to the **Advanced Settings** section and switch on “Respect Global Privacy Controls” with a toggle. Then click **Save Changes**. ![The WPConsent Advanced Settings panel with the Respect Global Privacy Controls toggle switched on and outlined in red.](https://wpconsent.com/wp-content/uploads/2026/03/enable-gpc-option.png)*Respect Global Privacy Controls sits in the Advanced Settings panel, below Clarity Consent Mode and Shared Consent.* The toggle is off by default, so nothing changes for GPC visitors until you save this. GPC needs both the **Consent Banner** and **Script Blocking** turned on to block tracking. The setup wizard turns both on by default. If you skipped the setup process, you can activate them from **WPConsent » Settings » Cookies Configuration**. ![WPConsent Cookies Configuration panel with the Consent Banner and Script Blocking toggles switched on and outlined in red.](https://wpconsent.com/wp-content/uploads/2026/10/enable-consent-banner-and-script-blocking.png)*While in the settings screen, make sure both the consent banner and script blocking are enabled.* The [Consent Banner](https://wpconsent.com/customizable-cookie-banner/) is what runs WPConsent’s consent system and detects the visitor’s GPC signal. [Script blocking](https://wpconsent.com/docs/automatic-script-blocking/) is what keeps non-essential scripts, like your analytics and ad pixels, from loading until a visitor agrees. GPC relies on both of them. ### Step 3: Customize the GPC Messages (Optional) WPConsent uses two GPC messages: one GPC visitors see when they arrive, and one they confirm if they want to allow cookies. The default messages work fine, but you can rewrite them to match your site. To customize them, go to **WPConsent » Banner Design** and click the **Content** tab. Scroll down to the bottom of the Content tab to customize the GPC messages in two fields: - The **GPC Honored Message** is the short message GPC visitors see in the bottom corner. “GPC Signal Honored” is the default. - The **GPC Override Message** is the text a visitor has to confirm before they can allow cookies against their GPC setting. These fields only appear after you’ve saved the GPC toggle in Step 2. ![The GPC Honored Message and GPC Override Message fields in WPConsent, filled with their default text.](https://wpconsent.com/wp-content/uploads/2026/03/edit-GPC-message.png)*Both GPC message fields, showing the default text WPConsent starts with.* Edit either one, then click **Save**. Our [GPC documentation](https://wpconsent.com/docs/global-privacy-control-gpc/) lists every GPC setting. --- ## What Honoring GPC Changes on Your Site Once the toggle is on, a few things change for visitors who send GPC. The first thing you’ll notice is your analytics. **GPC visitors don’t get analytics cookies, so your visitor numbers will be lower.** ### What the Law Requires, and How WPConsent Handles It These laws ask covered businesses to treat a GPC signal as a request to opt out of selling the visitor’s data and using it for targeted ads. WPConsent goes further than that. When the **Respect Global Privacy Controls** toggle is on, WPConsent declines every non-essential cookie category for a GPC visitor. That includes statistics, so analytics cookies are off for that visitor too, not just ad pixels. How much your analytics numbers drop depends on how many of your visitors send a GPC signal. Essential cookies stay on, so your site keeps working. WPConsent honors the signal for every visitor who sends it, wherever they are. It also applies to returning visitors who accepted cookies before they turned GPC on. This works on both opt-in and opt-out sites. Even on an opt-out site, a GPC visitor’s choice applies from the first page they load. On paid plans, you can use [location rules](https://wpconsent.com/how-to-set-up-location-based-cookie-consent-in-wordpress/) to show a different banner, or no banner, in different regions. Those rules don’t override GPC. A GPC visitor in a region where cookies are allowed by default is still opted out. ![WPConsent Geolocation screen with location-based rule templates for GDPR, CCPA and LGPD, plus a custom rule option.](https://wpconsent.com/wp-content/uploads/2025/10/add-location-based-rules.png)*Location-based rule templates make rules for specific regions easier to set up.* Switching on GPC support takes care of the signal in the visitor’s browser. You still need to check whether these laws cover your site, and the three-part test above is the place to start. On top of that, keep your Do Not Sell page. It handles requests visitors send you directly, and it covers data you share outside the browser, such as an email list. Here’s [how to handle Do Not Sell requests in WordPress](https://wpconsent.com/how-to-handle-do-not-track-requests-in-wordpress/). ### What a GPC Visitor Sees A visitor who sends GPC doesn’t see your [cookie banner](https://wpconsent.com/how-to-add-a-cookie-consent-banner-on-your-wordpress-website/). Their choice is already made. Instead, WPConsent shows the GPC Honored Message you set in Step 3, in the bottom corner of the page. It stays for 10 seconds, and the visitor can close it sooner. For example, a visitor might see this: ![A website with no cookie banner and a dark notification in the corner that reads: Your privacy signal was received. Non-essential cookies are off.](https://wpconsent.com/wp-content/uploads/2026/10/wpconsent-gpc-visitor-toast-no-banner.png)*A GPC visitor sees no banner, just your GPC message in the corner for 10 seconds.* This message matters most if California’s law covers your site. Since January 2026, California regulations have required covered businesses to show whether a visitor’s opt-out signal was processed. California also bans pop-ups shown in response to the signal for businesses that honor it in place of a **Do Not Sell or Share** link. However, a message that simply tells the visitor their opt-out was processed is allowed. WPConsent’s GPC message is one way to show visitors their opt-out was processed. You should ask a lawyer whether your overall setup meets California’s requirements. ### What Happens to Google Analytics and Consent Mode WPConsent also tells [Google Consent Mode](https://wpconsent.com/how-to-set-up-google-consent-v2-mode-in-wordpress/) that a GPC visitor declined analytics and ad storage, so Google’s tags don’t set cookies like `_ga` for them. The amount of data Google receives varies based on how your Google tags are configured. If your tags load before consent, which [Google calls Advanced consent mode](https://developers.google.com/tag-platform/security/concepts/consent-mode), they can still send cookieless pings. These carry no cookies, and Google uses them to [estimate missing data](https://wpconsent.com/docs/understanding-ga4-traffic-drops-when-using-google-consent-mode/). If you use Basic consent mode, the tags don’t load for that visitor at all. If you use Banner Analytics on a paid plan, GPC visitors aren’t counted as banner views or rejections because they never saw the banner. ![WPConsent Banner Analytics Consent Funnel showing banner views, decisions, acceptance rate and ignored rate, with a bar split into Accept All, Essential Only, Custom Preferences and Ignored.](https://wpconsent.com/wp-content/uploads/2026/09/wpconsent-consent-funnel.png)*Banner Analytics shows you Banner Views, Decisions, Acceptance Rate, and Ignored in one screen.* Check out our [Banner Analytics announcement](https://wpconsent.com/banner-analytics-see-how-many-visitors-ignore-your-cookie-banner/) to see how the feature tracks visitors who ignore your cookie banner. ### What if a Visitor Wants to Allow Cookies? A GPC visitor can still change their mind. WPConsent doesn’t prompt them to, but the option is there. If they open your preferences panel and try to turn on a non-essential category, WPConsent stops the save. Instead, it highlights a separate confirmation switch next to the GPC Override Message from Step 3. They need to turn that switch on before their choice saves. ![WPConsent Cookie Preferences panel with Statistics switched on and the GPC override switch highlighted after the visitor tried to save.](https://wpconsent.com/wp-content/uploads/2026/10/gpc-override-switch-highlighted.png)*Turning on a category isn’t enough. The visitor has to confirm the override switch before the change saves.* This prevents the visitor from overriding their GPC choice by accident. Once they confirm, their own choice applies on your site until their saved consent expires. WPConsent remembers each visitor’s choice for a set number of days, called the **Consent Duration**. It’s 30 days by default, and you can change it in **WPConsent » Settings**. Our [general settings guide](https://wpconsent.com/docs/configuring-wpconsent-general-settings/#setting-the-consent-duration) explains how. --- ## How to Check GPC Is Working on Your Site You can test GPC with Firefox or Brave. Both send the signal on their own, so there’s no extension to install. ### Send a GPC Signal From Your Browser Use whichever of these browsers you have: - **Firefox:** open a new private window. Firefox sends GPC in every private window by default. - **Brave:** a normal window works. Brave sends GPC by default. Use that same window for the rest of these steps. To confirm the signal is on, go to [globalprivacycontrol.org](https://globalprivacycontrol.org/). The bar at the top of the page should say “GPC signal detected.” ![The Global Privacy Control website with a bar across the top that reads: GPC signal detected.](https://wpconsent.com/wp-content/uploads/2026/10/globalprivacycontrol-org-signal-detected.png)*If your browser is sending GPC, the bar at the top of globalprivacycontrol.org says so.* ### Open Your Site in the Same Window Now visit your own site in the same window. You should see two things. Your cookie banner doesn’t appear, and your GPC message shows in the bottom corner for a few seconds. ### Check That No Tracking Cookies Were Set Next, right-click anywhere on your page and choose **Inspect**. In Firefox, open the **Storage** tab, then **Cookies**. In Brave, open **Application**, then **Cookies**. Then click your site’s address. Look for tracking cookies such as `_ga` from [Google Analytics](https://wpconsent.com/beginners-guide-to-google-analytics-cookie-consent-in-wordpress/) or `_fbp` from the Facebook pixel. Neither should be there. Check the cookies rather than the **Network** tab. If your Google tags run in Advanced consent mode, you’ll still see requests going to Google. Those are the cookieless pings from earlier, and they’re expected. ### Find the GPC Entry in Your Consent Logs (Paid Plans) On paid plans, WPConsent can keep a [record of each consent choice](https://wpconsent.com/how-to-manage-cookie-consent-data-in-wordpress/). GPC visits are marked in that record. Consent logging is off by default. To turn it on, go to **WPConsent » Settings**. On the **Settings** tab, switch on the **Consent Logs** toggle, just below **Consent Duration**, and save. After your test visit, go to **WPConsent » Consent Logs**. The entry for your visit shows **GPC: Acknowledged** in the **Consent Details** column. If a visitor confirms the override, it shows **GPC: User Overridden** instead. ![The WPConsent Consent Logs table with one guest entry whose Consent Details read GPC: Acknowledged, with statistics and marketing declined.](https://wpconsent.com/wp-content/uploads/2026/10/consent-logs-gpc-acknowledged.png)*A GPC visit in the Consent Logs: GPC is acknowledged, and statistics and marketing are declined.* ### My Banner Still Shows Up First, check that the **Respect Global Privacy Controls** toggle saved in Step 2. Next, clear your site’s cache if you use a caching plugin or your host caches pages. Then test again in a new private window. Caching doesn’t stop GPC, because WPConsent checks for it in the browser. Clearing it just makes sure you see your latest settings. Finally, test with a real browser rather than an online GPC checker. Some of those tools send the signal from a server, and WPConsent reads it inside the browser, so they may not trigger it. Your real visitors aren’t affected. --- ## FAQs: Global Privacy Control ### Does honoring GPC mean I don’t need a cookie consent banner anymore? No. Most of your visitors don’t send GPC, so they still need your banner to make a choice. GPC only means those specific visitors skip the banner, because their preference is already known. ### **Does GPC replace a Do Not Sell page?** Usually not. California lets you drop the Do Not Sell link only if you honor GPC “frictionlessly.” That means no pop-ups, no change to the visitor’s experience, and an explanation in your privacy policy. The other 11 states expect a clear opt-out link or notice as well as support for the signal. So for most covered sites, the simplest path is to keep the link and honor GPC. WPConsent’s Do Not Sell addon, on the Plus plan and up, adds a request form page. Here’s [how it handles Do Not Sell requests](https://wpconsent.com/how-to-handle-do-not-track-requests-in-wordpress/). ### Can I use GPC support with the free version of WPConsent? Yes. The **Respect Global Privacy Controls** toggle and both GPC messages are in the free plugin. Paid plans add consent logs that mark GPC visits, plus location rules. ### What happens if a visitor with GPC wants to allow cookies? They can. They confirm your GPC Override Message first, then their own choice applies on your site. ### Why are non-essential scripts still loading even though GPC is enabled? Check the three toggles from Step 2. **Consent Banner** and **Script Blocking** should be on in the **Cookies Configuration** panel of **WPConsent » Settings**. **Respect Global Privacy Controls** should be on in the **Advanced** tab. If all three are on, clear your site’s cache and test again in a new private window. ### Does Chrome support GPC? As of October 2026, Chrome has no built-in GPC setting. Chrome users need an extension such as Privacy Badger, DuckDuckGo Privacy Essentials, or OptMeowt. Google has reportedly been testing one in its experimental Canary build. From January 1, 2027, California law requires browsers to offer an opt-out signal setting. ### Does GPC block cookies? Not on its own. GPC is only a signal. It’s up to each website to act on it. With WPConsent’s GPC toggle and Script Blocking on, your site declines every non-essential cookie category for GPC visitors, so tracking cookies like `_ga` and `_fbp` aren’t set. --- ## Turn On Global Privacy Control Support in WordPress You now know what GPC is, when the law expects a site to honor it, and what changes when you do. Start with the three-part test above. If your site sells data or runs ad pixels for visitors in those 12 states, take it to your lawyer with your traffic numbers. Then turn on the toggle and run the browser test. It takes a couple of minutes. We won’t tell you one toggle makes your site compliant. What it does is make sure the signal your visitors already sent gets acted on. Want to honor GPC using a free WordPress consent plugin? **[Get WPConsent for free →](https://wordpress.org/plugins/wpconsent-cookies-banner-privacy-suite/)** Need consent logs that mark GPC visits, plus location rules for different regions? **[See WPConsent plans →](https://wpconsent.com/pricing/)** --- ## Additional Resources Three guides to help you check the rest of your privacy setup: - **[GDPR vs CCPA](https://wpconsent.com/gdpr-vs-ccpa-wordpress/)**: how the EU and California rules differ, including where GPC fits. - **[Cookie consent requirements by country](https://wpconsent.com/cookie-consent-wordpress-requirements-by-country/)**: what other countries expect from your banner. - **[How to audit your site for cookie compliance](https://wpconsent.com/cookie-compliance-audit-wordpress/)**: a step-by-step check of everything your site loads. --- *Disclaimer: This article is provided for informational and educational purposes only and does not constitute legal advice. Privacy laws differ by state and change often. Please consult a licensed attorney about your specific situation. No tool, WPConsent included, can by itself guarantee compliance or prevent a regulatory action. Proper configuration and legal review of your specific site both matter.* --- **Categories:** Informational **Tags:** CCPA, consent management plugin, cookie banner, cookie consent, GDPR, Global Privacy Controls, GPC, GPC support, wpconsent, wpconsent scanner ---