The recent announcement by the states of California, Colorado and Connecticut that they are working together to carry out a joint investigative sweep has raised eyebrows across the privacy world. Last week, California Attorney General Rob Bonta, the California Privacy Protection Agency (CPPA), and the attorneys general of Colorado and Connecticut announced that they are working together to investigate businesses that refuse to honor consumers’ right to opt out of the sale or sharing of their personal data. The sweep aims especially at companies that are not processing opt-out requests made via the Global Privacy Control tool (GPC), even though it is required by law in each of the three states involved.