About CPRA messages

Note: The California Privacy Rights Act (CPRA) is now in effect in place of the California Consumer Privacy Act (CCPA). CPRA now covers the sharing of personal information in addition to the sale of personal information. Learn more about the changes to CPRA messages.  

The California Privacy Rights Act (CPRA) is a data privacy law that establishes various rights for California state residents. The law applies to companies that do business in California and meet one of several criteria related to revenue, data processing, and other factors. CPRA requires giving residents the right to opt out of the “sale or sharing" of their “personal information” (as the law defines those terms), with the opt-out offered via a prominent “Do Not Sell or Share My Personal Information” link on the “selling/sale” party’s homepage. 

As part of CPRA, publishers who sell or share personal information must post a link on their homepage for consumers to opt out of the sale or sharing of the consumer’s personal information (§ 1798.135). The CPRA message type is displayed to users located in the US state of California and gives them the opportunity to opt out.

It is your responsibility to make sure your messages meet legal requirements.

Updates to CPRA from CCPA

CPRA is now in effect. This means that users can opt out of the sale and the sharing of their personal information. If you were using default text in your CCPA messaging, we have automatically updated your message to read: “Do Not Sell or Share My Personal Information.” If you previously set a custom CCPA message, we suggest you revise your CCPA messaging in light of the CPRA.  

Structure of a message

A US state regulations message contains multiple "screens" (or "pages") that are shown to users when they view your message.

Note: The look and feel of your "Do Not Sell or Share" link may look different from the styling shown above.

US state regulations messages include the following elements:

1. Do Not Sell or Share link: The link to your US state regulations message. Displays your "Do Not Sell or Share My Personal Information" link using the formatting and settings you selected. When users click the link, the Confirm page opens and displays the "Opt out of the sale or sharing of personal information" dialog.
2. Confirm page: The confirmation page of your US state regulations message. Displays the "Opt out of the sale or sharing of personal information" dialog. Users can click the buttons to confirm their decision.
   1. Logo: Your site or app's logo. To include a logo here, add a logo to your message.
   2. "Dismiss" button: Allows users to dismiss the message without opting out of the “sale or sharing” of their “personal information” (as the law defines those terms). Closes the message.
   3. "Opt out" button: Allows users to opt out of the “sale or sharing” of their “personal information” (as the law defines those terms). When users click the "Opt out" button, the message communicates their opt-out status to Google. Closes the message.