What IAB CCPA Compliance Framework - US Privacy Technical Specification: Global Privacy Control (GPC) Signal Honouring, Opt-Out of Sale/Sharing, Privacy Signal Pass-Through in RTB Auctions, CCPA/CPRA String and Publisher Liability Protections requires
This regulation establishes a standardized contractual and technical framework for honoring consumer privacy rights under U.S. state privacy laws, particularly regarding opt-out of sale/sharing of personal information in digital advertising. It applies to advertisers, publishers, technology vendors, and agencies participating in digital ad transactions, and operates via the IAB Multi-State Privacy Agreement (MSPA) as a springing contract effective upon data flow, with mandatory adherence to privacy signaling through the Global Privacy Protocol (GPP) for publishers. Key provisions are defined in the Fourth Amended and Restated MSPA effective July 7, 2025, and its amendments effective January 1, 2026.
Pillar: Data Protection & Privacy · Authority: Interactive Advertising Bureau (IAB) Privacy · Version: 1.0.1 · Last updated:
Primary source: https://iabprivacy.com/
SHA-256 integrity: 427ece028ec12ba6c3a4045b055e4b277118cd1bf22bc887916837026ec53a3c
Primary Citations — 5 traced to source
- Fourth Amended and Restated MSPA, https://iabprivacy.com/, Effective Date July 7, 2025, 2025
- Amendment to the Fourth Amended and Restated MSPA, https://iabprivacy.com/, Effective Date January 1, 2026, 2026
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/iab-ccpa-compliance-us-privacy-technical-spec.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/iab-ccpa-compliance-us-privacy-technical-spec.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/iab-ccpa-compliance-us-privacy-technical-spec
- Back to registry: Browse all 10,085 compliance nodes