The policy states that Target processes Global Privacy Control browser signals as valid opt-out requests from consumers for the sale or sharing of personal information.
This analysis describes what Target's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Recognition of GPC signals as valid opt-out requests is required under CPRA regulations for businesses subject to CCPA/CPRA; this provision creates an operational obligation to implement technical GPC signal recognition consistently across all digital surfaces and to honor those signals within the 15-business-day response period.
This provision establishes that consumers using GPC-compatible browsers can automatically signal an opt-out of the sale or sharing of personal information to Target without submitting a separate privacy request; the opt-out applies to data sale and sharing for advertising purposes as described in the policy.
How other platforms handle this
we do honor legally-recognized browser-based mechanisms (such as the Global Privacy Control designed to signal your opt out choices under certain state laws).
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
"We process Global Privacy Control signals as opt-out requests for the sale or sharing of personal information.Excerpt from Target's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Recognition of GPC signals as valid opt-out requests is required under CPRA regulations for businesses subject to CCPA/CPRA; this provision creates an operational obligation to implement technical GPC signal recognition consistently across all digital surfaces and to honor those signals within the 15-business-day response period.
This provision establishes that consumers using GPC-compatible browsers can automatically signal an opt-out of the sale or sharing of personal information to Target without submitting a separate privacy request; the opt-out applies to data sale and sharing for advertising purposes as described in the policy.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Target.