What’s required under CPRA ‘Do Not Sell or Share’?
The California Privacy Rights Act (CPRA) amends and expands the opt-out requirements set by the California Consumer Privacy Act (CCPA). Under CPRA, consumers have the right to opt out of both the sale and share of their personal information.
The CPRA states that
“A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information. This right may be referred to as the right to opt-out of sale or sharing.”
The CPRA calls on businesses to offer opt-out mechanisms on their website:
- Display a clear and conspicuous “Do Not Sell or Share My Personal Information” link on your website.
- Respect users’ global opt-out preference signals such as the Global Privacy Control.