The California Consumer Privacy Act of 2018 (CCPA) provides California residents four rights—the Right to Know, Right to Delete, Right to Opt-Out, and Right to Non-Discrimination. The Right to Opt-Out is a consumer’s right to opt-out of a sale of personal information.
As a business, you will have to determine if you “sell” personal information under the CCPA. One common scenario that many businesses consider a sale under the CCPA is the use of interest-based advertising. You can read more about it in our two-part blog series. If you are “selling” information, you must provide California consumers with a way to opt-out of this sale.
If you use interest-based advertising, you’ll want to ensure web visitors can opt out of having their information shared with ad networks. Doing so helps you build trust with customers and web visitors through transparent consent-based privacy practices. Additionally, non-compliance with the CCPA may result in monetary penalties. Read about why it’s better to get compliant sooner rather than later.
Opt-out tracking isn’t just required by the law, it’s also good business practice. By recording the specific dates that requests were made, you can schedule a request to ask the consumer to opt-in again after 12 months.
There is no one perfect way to track opt-outs but you’ll want to consider a variety of methods to determine what works best for you.
For example, Facebook’s Limited Data Use (LDU), or Google’s Restricted Data Processing (RDP) can help you provide website visitors with a way to opt out. These settings, when enabled, change the way these services process data. The easiest way to learn about these solutions is to search the vendor or ad network name along with the phrase “ccpa opt out”.
You may need to provide multiple sets of directions for opting out depending on the type of "selling" that you do.
While the DAA tool and ad network-specific tools can enable California consumers to opt-out, it does not provide a way for your business to track and keep record of these opt-outs. Your next best option may be to keep a log of IP addresses and time stamps of web visitors that click on the opt-out links you provide.
TrueVault offers businesses an easy solution to get CCPA compliant. If you need help, schedule a call with us!
Disclaimer: This content is provided for general informational purposes only and does not constitute legal advice. This content is not a substitute for obtaining legal advice from a licensed attorney. The information on this page may be changed without notice and is not guaranteed to be complete, correct or up-to-date, and may not reflect the most current legal developments.