If your organization is subject to CCPA/CPRA and your data practices qualify as a "sale" or "share" of personal information, you are generally required to provide California consumers with a clear, accessible opt-out entry point. This guide explains how to configure the Secure Privacy CCPA widget to display the "Do Not Sell" or "Do Not Sell or Share My Personal Information" label — aligning your website with CCPA/CPRA expectations.
Note: This article provides product configuration guidance and is not legal advice. Consult your legal team to confirm whether your data practices qualify as a sale or share under CCPA/CPRA.
Who Is This For?
Businesses subject to CCPA/CPRA that may "sell" or "share" personal information — for example, through cross-context behavioral advertising.
Privacy and compliance owners who need a visible opt-out link or label on their website for California consumers.
Web teams implementing the opt-out UX — site administrators, marketing ops, or developers managing Secure Privacy Templates and site caching or CDN configuration.
CCPA/CPRA "Do Not Sell or Share" Requirement
Organizations subject to CCPA/CPRA that sell or share personal information must provide a visible, accessible opt-out entry point for California consumers. Many websites present this as a persistent label in the footer or via a widget displaying "Do Not Sell" or "Do Not Sell or Share My Personal Information."
Updating your Secure Privacy widget text helps:
Make the opt-out entry point clearly visible and recognizable to California consumers
Align your site UI with common CCPA/CPRA consumer expectations
Reduce friction for privacy requests and improve visitor trust
How to Set the Widget Text to "Do Not Sell" in Secure Privacy
Step 1: Sign in and open the CCPA template
Sign in to your Secure Privacy dashboard.
In the main navigation, click Templates.
Select CCPA from the template categories.
Step 2: Open the Widget settings
In the CCPA template options, locate the Widget section.
Click to expand the widget configuration panel.
Step 3: Update the widget label
Locate the Widget Display Text field.
Clear the existing text and enter: Do Not Sell
Click Save.
Optional: If you prefer full CPRA wording, use "Do Not Sell or Share My Personal Information" — provided it fits your site's design constraints.
Verify Your "Do Not Sell" Opt-Out Experience
Open your website in an incognito or private browser window.
Confirm the widget now displays "Do Not Sell" (or your chosen label).
Click the widget and verify that the opt-out flow loads and functions correctly.
If your site uses caching or a CDN, clear the cache and retest to confirm the updated label is live.
Best Practices for CCPA Opt-Out Widget Configuration
Use wording consumers recognize
"Do Not Sell" and "Do Not Sell or Share My Personal Information" are the standard phrases California consumers are familiar with — and what many will actively search for. Using recognized wording reduces confusion and increases opt-out discoverability.
Make the opt-out easy to find
Keep the widget or opt-out link persistently accessible — commonly in the website footer and/or via a floating widget visible on all pages. CCPA/CPRA requires the opt-out to be easy to locate, not buried in a privacy policy.
Ensure the opt-out actually functions
The label is only effective if the underlying configuration correctly limits the sale or sharing of personal information when a consumer opts out. Verify the full opt-out flow — not just the label — is working as intended.
Frequently Asked Questions
Why is my widget text not updating on the live site?
Confirm you clicked Save in the CCPA template settings. Then clear your site cache, CDN cache, and browser cache, and retest in an incognito window. If you manage multiple templates or environments, confirm you edited the correct template.
Can I customize widget text for other templates, such as GDPR?
Yes. Open the relevant template — for example, GDPR or another regional template — and locate the equivalent Widget settings section to update the display text for that template's widget.
Does changing the widget text alone make me CCPA/CPRA compliant?
No. The label helps consumers find the opt-out, but CCPA/CPRA compliance also requires the underlying opt-out functionality to work correctly, and your overall data practices, disclosures, and privacy policy must align with the regulation's requirements. Consult your legal team for compliance guidance.
See Also
Need More Help?
If the label updates in the dashboard but is not appearing on your live site — or you are unsure whether your setup qualifies as a "sale" or "share" under CCPA/CPRA — contact Secure Privacy support at [email protected].