Audit: Big Tech Often Ignores CA Privacy Law Opt-Out Requests

WebXray audited 7,634 popular California websites and found that Google, Meta, and Microsoft often ignore the Global Privacy Control (GPC) opt-out signal prescribed by the CCPA—Google (86% failure), Meta (69%), Microsoft (~50%)—with evidence that advertising cookies are still set despite opt-out signals; the report recommends continuous testing of opt-out handling, auditing third-party ad-tech, and treating privacy telemetry like security telemetry.