The California Consumer Privacy Act (CCPA) is a data privacy law that establishes various rights for California state residents. The law applies to companies that do business in California and meet one of several criteria related to revenue, data processing, and other factors. CCPA requires giving residents the right to opt out of the “sale” of their “personal information” (as the law defines those terms), with the opt-out offered via a prominent “Do Not Sell My Personal Information” link on the “selling” party’s homepage. CCPA does recognize certain exceptions to the definition of “sale,” such that not all transfers of personal information are “sales.” For example, transferring personal information to a “service provider” under the law is not a sale.
As part of CCPA, publishers must post a "Notice of Right to Opt-Out of Sale of Personal Information" (§ 999.306). The CCPA message type is displayed to users located in the US state of California and gives them the opportunity to opt out.
A CCPA message contains multiple "screens" (or "pages") that are shown to users when they view your message.
CCPA messages include the following elements:
- Do Not Sell link: The link to your CCPA message. Displays your "Do Not Sell My Personal Information" link using the formatting and settings you selected. When users click the link, the Confirm page opens and displays the "Opt out of the sale of personal information" dialog.
- Confirm page: The confirmation page of your CCPA message. Displays the "Opt out of the sale of personal information" dialog. Users can click the buttons to confirm their decision.
- Logo: Your site or app's logo. To include a logo here, add a logo to your message.
"Dismiss" button: Allows users to dismiss the message without opting out of the “sale” of their “personal information” (as the law defines those terms). Closes the message.
"Opt out" button: Allows users to opt out of the “sale” of their “personal information” (as the law defines those terms). When users click the "Opt out" button, the message communicates their opt-out status to Google. Closes the message.