What CCPA/CPRA (Opt-out Sale) requires
California Civil Code § 1798.120 establishes a consumer's fundamental right to direct a business to stop selling or sharing their personal information. Fulfilling this obligation, as detailed in California Civil Code § 1798.135, mandates providing clear notice and an accessible "Do Not Sell or Share My Personal Information" link, a control set by `require_do_not_sell_share_link`. Businesses must offer a `minimum_opt_out_methods` count of two distinct submission mechanisms. Crucially, the process must `allow_frictionless_opt_out` by honoring opt-out preference signals like the Global Privacy Control (GPC), a requirement under 11 California Code of Regulations § 7025 which the system configuration `honor_global_privacy_control_gpc` enables. Upon receiving a valid request, a business has 15 business days (`days_to_effectuate_opt_out`) to cease selling or sharing the consumer's data, pursuant to 11 California Code of Regulations § 7026. This directive also requires that the business `propagate_opt_out_to_third_parties`, notifying all downstream recipients within an identical 15-day window (`days_to_notify_third_parties`). The user experience must be straightforward, as `prohibit_dark_patterns` is enforced and identity verification is not a prerequisite for this request type (`require_identity_verification_opt_out`). For consumers under the `minor_opt_in_age_threshold` of 16, California Civil Code § 1798.120(c) prohibits any sale or sharing without affirmative authorization. After a consumer opts out, a business must wait 12 months (`months_before_opt_in_re_ask`) before asking for re-authorization, a rule stipulated by 11 California Code of Regulations § 7028. All opt-out requests must be documented and retained for a period of 24 months (`record_retention_months`) to demonstrate compliance.
Pillar: Data Protection & Privacy · Authority: California Privacy Protection Agency (CPPA) · Version: 1.1.0 · Last updated:
Primary source: https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5
SHA-256 integrity: 5cef34202b71fc51238c05557349dd3318ce2882d449c530b0a6822ed1a8cc89
Primary Citations — 6 traced to source
- California Civil Code § 1798.120 (Consumers' Right to Opt-Out of Sale or Sharing of Personal Information)
- California Civil Code § 1798.135 (Methods of Limiting Sale, Sharing, and Use of Personal Information)
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/ccpa-cpra-optout-sale.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/ccpa-cpra-optout-sale.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/ccpa-cpra-optout-sale
- Back to registry: Browse all 10,085 compliance nodes