The notice states that Experian accepts Global Privacy Control signals as opt-out requests in states where applicable, but that the opt-out is linked only to the browser identifier unless the consumer separately connects it to their account or personal information held by Experian. Consumers must enable the GPC signal on each browser or extension they use individually.
This analysis describes what Experian's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that GPC-based opt-outs operate at the browser identifier level and do not automatically extend to a consumer's full Experian account or other personal information records unless the consumer takes an additional step to link them by contacting Experian. This creates an operational gap where a consumer who relies solely on GPC may have their browsing-derived data opted out but their account-level personal information and data broker records continue to be sold.
Interpretive note: Whether a browser-identifier-limited GPC implementation satisfies CPRA and other state statutory requirements for honoring opt-out preference signals across all personal information held about a consumer is subject to regulatory interpretation and has not been definitively resolved by enforcement action cited in this document.
Under this provision, a GPC signal submitted through a browser will opt out only the associated browser identifier from personal information sales and targeted advertising, not the consumer's full account or all personal information held by Experian. To connect the browser-level opt-out to account-level data, the notice states consumers should send their name and mailing address to optout@experian.com.
Cross-platform context
See how other platforms handle Global Privacy Control and Opt-Out Preference Signal and similar clauses.
Compare across platforms →"In certain states, consumers may opt out of personal information sales, sharing, and targeted advertising by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC), on browsers and/or browser extensions that support such a signal. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. Your request to opt-out will be linked to your browser identifier only, unless it is already linked to other personal information. If you would like us to make the connection between your browser and your account, or other personal information that we may hold that is subject to opt out when you send the Opt-Out Preference Signal and you have not yet opted out, we recommend you send your complete name and mailing address to optout@experian.com.Excerpt from Experian's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This provision establishes that GPC-based opt-outs operate at the browser identifier level and do not automatically extend to a consumer's full Experian account or other personal information records unless the consumer takes an additional step to link them by contacting Experian. This creates an operational gap where a consumer who relies solely on GPC may have their browsing-derived data opted …
Under this provision, a GPC signal submitted through a browser will opt out only the associated browser identifier from personal information sales and targeted advertising, not the consumer's full account or all personal information held by Experian. To connect the browser-level opt-out to account-level data, the notice states consumers should send their name and mailing address to optout@experian.com.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Experian.