Intent to Prototype: Global Privacy Control

[Maciej Czarnecki]

Contact emails

mccz...@gmail.com

Specification

https://w3c.github.io/gpc

Summary

Implementation of Global Privacy Control (GPC) signal to enable users to communicate their preference for privacy protection across websites. This feature implements the W3C GPC specification (https://github.com/w3c/gpc/blob/main/explainer.md) and includes: (1) a user preference setting to enable the Global Privacy Control signal, (2) automatic transmission of the Sec-GPC HTTP header with a value of "1" on all outgoing requests when enabled, and (3) JavaScript API exposure via the navigator.globalPrivacyControl property allowing websites to detect the user's GPC preference. When enabled, this signal indicates the user's request to limit the sale or sharing of their personal information with third parties.

Blink component

Blink>Loader

Web Feature ID

gpc

Motivation

The signal is already implemented by other browsers and Chrome should catch-up with this privacy setting. This year California signed a bill under the CCPA/CPRA that obligates the browsers to provide ability to communicate do-not-sell-or-share preference before 2027. Currently, Chrome allows to send GPC header only via an extension which may be not sufficient to be compliant with the bill.

Initial public proposal

No information provided

Search tags

gpc, global privacy control, Sec-GPC, CCPA, CPRA

Requires code in //chrome?

False

Tracking bug

https://issues.chromium.org/issues/40745270

Estimated milestones

No milestones specified

Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5137324344213504?gate=5161638758055936

This intent message was generated by Chrome Platform Status.

[Maciej Czarnecki]

CL with initial implementation:
https://chromium-review.googlesource.com/c/chromium/src/+/7319383

It has no user-facing settings, as I would need some decisions in regards of the place it should be put and its labels. Also Do-Not-Track toggle has a modal with an explanation what it does. Should GPC has it as well?