§ 7025(c)(3)RegulationAudited by Privisy

GPC — Marketing Cookies Must Be Blocked

Effective March 29, 2023Reviewed January 2026

Audited by Privisy — The Privisy scanner actively tests for compliance with this requirement. Findings linked to this citation appear in your scan report.

What it requires

When a GPC signal is active, third-party marketing and advertising cookies must not be loaded. Failing to block these trackers after receiving the GPC signal is a violation, regardless of whether a "Do Not Sell" link is present.

Legal text (excerpt)

A business that receives a valid opt-out preference signal shall not: load third-party scripts or pixels that conduct cross-context behavioral advertising, set or send any cookies or similar tracking technology to third parties for the purposes of targeted advertising.

California Consumer Privacy Act / California Privacy Rights Act§ 7025(c)(3), Regulation, effective 2023

Primary source

📄California Privacy Protection Agency (CPPA)§ 7025(c)(3): GPC — Marketing Cookies Must Be Blocked

Privisy checks

The following Privisy scanner checks are grounded in this citation:

  • GPC Signal — Marketing Cookies Blocked
  • GPC — Marketing Trackers Blocked

Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change — verify against the authoritative source and consult a licensed attorney for compliance guidance.

Stop Guessing. Start Knowing.

Find out exactly where your website stands before a regulator does.

Get My Compliance Audit