An interesting tidbit from Mozilla’s latest privacy release (https://www.ghacks.net/2023/11/21/firefox-120-ships-today-with-massive-privacy-improvements/):
The first introduces support for the Global Privacy Control in Settings. The privacy feature informs websites that you visit that you don’t want your data sold or shared. It is legally binding in some states in the United States, including in California and Colorado.
What’s to stop users from utilizing a VPN exit point in California or Colorado to force the binding nature of the request?
If you’re in one of those, yes. There’s tons of websites that list what they are and compare them against others, but basically all of them (that I’ve seen) have all the basics like not sharing your info without consent, right to data deletion, how they can share your data when they do etc.