The California Privacy Rights Act (CPRA) is a data privacy law that establishes various rights for California state residents. The law applies to companies that do business in California and meet one of several criteria related to revenue, data processing, and other factors. CPRA requires giving residents the right to opt out of the “sale or sharing" of their “personal information” (as the law defines those terms), with the opt-out offered via a prominent “Do Not Sell or Share My Personal Information” link on the “selling/sale” party’s homepage.
As part of CPRA, publishers who sell or share personal information must post a link on their homepage for consumers to opt out of the sale or sharing of the consumer’s personal information (§ 1798.135). The CPRA message type is displayed to users located in the US state of California and gives them the opportunity to opt out.
Updates to CPRA from CCPA
CPRA is now in effect. This means that users can opt out of the sale and sharing of their personal information. If you were using default text in your CCPA messaging, we have automatically updated your message to read: “Do Not Sell or Share My Personal Information.” If you previously set a custom CCPA message, we suggest you revise your CCPA messaging in light of the CPRA.
Structure of a message
A CPRA message contains multiple "screens" (or "pages") that are shown to users when they view your message.
CPRA messages include the following elements:
- Do Not Sell or Share link: The link to your CPRA message. Displays your "Do Not Sell or Share My Personal Information" link using the formatting and settings you selected. When users click the link, the Confirm page opens and displays the "Opt out of the sale or sharing of personal information" dialog.
- Confirm page: The confirmation page of your CPRA message. Displays the "Opt out of the sale or sharing of personal information" dialog. Users can click the buttons to confirm their decision.
- Logo: Your site or app's logo. To include a logo here, add a logo to your message.
"Dismiss" button: Allows users to dismiss the message without opting out of the “sale or sharing” of their “personal information” (as the law defines those terms). Closes the message.
"Opt out" button: Allows users to opt out of the “sale or sharing” of their “personal information” (as the law defines those terms). When users click the "Opt out" button, the message communicates their opt-out status to Google. Closes the message.