Do I need a CCPA opt-out link?

Businesses covered by the CCPA must give California consumers a way to opt out when their personal information is sold or shared. This includes certain sharing for cross-context behavioral advertising. The California Privacy Rights Act (CPRA) amended the CCPA and expanded consumer privacy rights in this area.

In most cases, businesses that sell or share personal information must provide a visible “Do Not Sell or Share My Personal Information” link or an approved alternative privacy choices link. Businesses must also honor qualifying opt-out preference signals, including Global Privacy Control (GPC).

A separate opt-out link may not be required when a business processes qualifying opt-out preference signals in the frictionless manner required by the CCPA regulations. If a business does not sell or share personal information as defined under the CCPA, it generally does not need to provide a “Do Not Sell or Share” link.