Thread · 2 tweets · 10 Feb 2021

Replying to @PrivacyMatters and @EUCouncil, @Europarl_EN, @EU_Commission

The GPC could be used for that. Technically, nothing prevents browsers from sending it differently to different parties. Its scope is limited to the provision of data to data controllers other than the first party, but that's already a first step.
Under the GDPR, for transfers to 3P controllers, it conveys a withdrawal of consent or an objection to LI/PI depending on which legal basis was used. Did they remove the thing where browsers would have to abide by site-obtained consent?