CCPA/CPRA Do Not Sell Compliance

Overview

If your business is subject to the California Consumer Privacy Act (CCPA) or California Privacy Rights Act (CPRA), you may be required to provide a clear "Do Not Sell or Share My Personal Information" option for California visitors. This guide shows you how to configure the opt-out widget in your Secure Privacy dashboard.

This article covers product configuration only and does not constitute legal advice. Consult your legal team to determine whether your data practices qualify as a "sale" or "share" under CCPA/CPRA.

Who Needs This?

This applies to your organization if:

• Your business is subject to CCPA/CPRA (generally applies to businesses meeting certain revenue, data volume, or data-sharing thresholds)
• You sell or share personal information -- which under CPRA includes cross-context behavioral advertising
• You need a visible opt-out link on your website for California consumers

What the Requirement Means

CCPA/CPRA requires that businesses provide a clear, easily accessible opt-out mechanism. Most sites implement this as a persistent widget or footer link labeled "Do Not Sell" or "Do Not Sell or Share My Personal Information."

Properly configuring this label helps:

• Make the opt-out entry point immediately visible to users
• Align your site with common CCPA/CPRA expectations
• Build user trust and reduce friction for privacy requests

Configuring the Widget Text

Step 1: Open the CCPA Template

1. Sign in to your Secure Privacy dashboard
2. In the main navigation, click Templates
3. Select CCPA from the template categories

Step 2: Find the Widget Settings

1. In the CCPA template options, locate the Widget section
2. Click to expand the widget configuration panel

Step 3: Update the Label

1. Find the Widget Display Text field
2. Clear the existing text
3. Enter one of the following:

- Do Not Sell (shorter, more common)

- Do Not Sell or Share My Personal Information (CPRA-specific wording)

1. Click Save

Verifying the Opt-Out Experience

After saving your changes, verify everything works correctly:

1. Open your website in an incognito/private browser window
2. Confirm the widget displays the updated text
3. Click the widget and verify the opt-out flow loads properly
4. Complete the opt-out flow to ensure it works end-to-end
5. If your site uses caching or a CDN, clear cache first and retest

Best Practices

• Use recognizable wording -- "Do Not Sell" or "Do Not Sell or Share My Personal Information" matches what consumers search for and expect
• Make it easy to find -- Place the opt-out in your footer and/or use a persistent widget that is visible on every page
• Verify the opt-out works -- The label is only useful if the underlying functionality properly limits the selling or sharing of personal information
• Test regularly -- Whenever you update your site or change analytics/advertising integrations, retest the opt-out flow

Troubleshooting

Widget text not updating on my live site

Confirm you clicked Save in the CCPA template settings. Then clear your site cache, CDN cache, and browser cache. Retest in an incognito window.

Can I customize widget text for other regional templates?

Yes. Open the relevant template (e.g., GDPR) and look for the equivalent Widget settings section to update the display text.

Does changing the label make me fully CCPA/CPRA compliant?

No. The label helps users find the opt-out, but you also need the underlying opt-out functionality to work correctly. Your disclosures, data processing agreements, and implementation should all align with CCPA/CPRA requirements. Consult your legal team for a complete compliance review.

Need Help?

If the label updates in the dashboard but does not appear on your live site, or if you are unsure whether your setup qualifies as a "sale" or "share," contact Secure Privacy support at [email protected].