{"id":7331,"date":"2025-04-08T14:20:00","date_gmt":"2025-04-08T14:20:00","guid":{"rendered":"https:\/\/plumrocket.com\/blog\/?p=7331"},"modified":"2025-04-11T11:26:20","modified_gmt":"2025-04-11T11:26:20","slug":"20-examples-do-not-sell-my-info","status":"publish","type":"post","link":"https:\/\/plumrocket.com\/blog\/20-examples-do-not-sell-my-info","title":{"rendered":"20 Examples of \u201cDo Not Sell or Share My Personal Information\u201d Page"},"content":{"rendered":"\n

For eCommerce businesses, California Consumer Privacy Right (CCPA<\/a>) compliance should be high on your radar from 2020. Like the General Data Protection Regulation (GDPR<\/a>) in Europe, CCPA focuses on protecting California customer data and giving them a right to control their personal information (read more about CCPA rights<\/a>). It came into effect on January 1st, 2020, and only applies to California residents and merchants who sell to Californians.<\/p>\n\n\n\n

Although both regulations have a number of similarities, there are some key differences between them. Specifically, the CCPA requires a clear \u201cDo Not Sell My Personal Information<\/a>\u201d page. It should provide the website visitors with an opportunity to opt out of the sale of their personal data to third parties.<\/p>\n\n\n\n

In addition to the existing CCPA regulations, it’s important to note that the California Privacy Rights Act (CPRA) has introduced significant changes to data privacy compliance in California. The CPRA, which amends and expands upon CCPA, came into effect in 2023 and further strengthens the protection of California customer data. It goes beyond CCPA by introducing new requirements, such as additional consumer rights, enhanced data breach notification obligations, and stricter regulations for businesses handling sensitive personal information. Businesses operating in California must now navigate both CCPA and CPRA to ensure comprehensive compliance with the evolving landscape of data privacy regulations in the state.<\/p>\n\n\n\n

One crucial point to highlight is that the “Do Not Sell My Personal Information” requirement, initially mandated by CCPA, remains a fundamental aspect of CPRA compliance as well.<\/p>\n\n\n\n

Data Privacy Laws in the U.S. States<\/h2>\n\n\n\n

While CCPA and CPRA directly impact interactions with Californians, their influence reaches much further. Think of the CCPA as setting the standard; now, many other states are adopting similar rules to protect their residents’ data privacy. This creates a growing web of regulations that businesses must understand.<\/p>\n\n\n\n

Inspired by California, many states have put their own comprehensive privacy laws into effect, such as Virginia’s VCDPA, Colorado’s CPA, Connecticut’s CTDPA, and Utah’s UCPA are just a few <\/strong>examples. These laws grant consumers similar rights as the CCPA. Plus, more states are actively developing and passing their own privacy legislation right now.<\/p>\n\n\n\n

What does this mean for your eCommerce site? A key feature copied from CCPA\/CPRA is the right to opt out of data selling or sharing. Therefore, providing a clear “Do Not Sell or Share My Personal Information” page is no longer just a California requirement<\/p>\n\n\n\n

\n

Need to implement compliance with these expanding privacy laws in your Magento store? Discover how to manage these complex requirements effectively with our <\/span>Magento 2 US Privacy Laws Extension<\/a>.<\/span><\/p><\/p>\n<\/div><\/div>\n\n\n\n

Where to Display Your “Do Not Sell or Share My Personal Information” Page<\/h2>\n\n\n\n

Since there are no strict boundaries on implementing the \u201dDo Not Sell or Share\u201d page on your website, you can find a wide range of its examples in eCommerce. However, we are provided with precise requirements for where to display the \u201cDo Not Sell\u201d link.<\/p>\n\n\n\n

As required by CCPA & CPRA, merchants have to \u201cprovide a clear and conspicuous link on the business\u2019s Internet homepage, titled “Do Not Sell or Share My Personal Information\u201d, as well as include the link in the Privacy Policy or other online policies. In practice, besides policies, merchants usually include the \u201cDo Not Sell or Share\u201d link in the footer of their websites to be easily accessible on homepages and throughout the website.<\/p>\n\n\n\n

It is important to understand that this specific link requirement applies to businesses that actually “sell” or (under the updated CPRA) “share” personal information<\/em> as defined by the law. If a business does not sell or share personal information, it is not obligated to provide this explicit “Do Not Sell or Share My Personal Information” link on its homepage. However, such businesses must still clearly state this fact within their Privacy Policy<\/em>, affirming that they do not engage in the sale or sharing of personal information.=<\/p>\n\n\n\n

Why Your Site Needs to Hear the GPC Opt-Out Signal<\/h2>\n\n\n\n

While providing a clear “Do Not Sell or Share My Personal Information” link is a well-known CCPA\/CPRA requirement, overlooking another critical mandate can lead to non-compliance: recognizing the Global Privacy Control (GPC) signal.<\/p>\n\n\n\n

Global Privacy Control is a standardized technical signal transmitted by browsers or extensions when enabled by a user. This signal automatically communicates the user’s legal right and intention to opt out of the sale or sharing of their personal information under laws like the CCPA\/CPRA.<\/p>\n\n\n\n

Regulations under the CCPA\/CPRA make it clear: businesses subject to the law must treat a received GPC signal<\/strong> as a valid consumer request to opt out. It cannot be ignored. Failing to detect and honor GPC is a violation.<\/p>\n\n\n\n

Websites must implement technology that can detect the GPC signal in browser requests and automatically honor it by opting the user out for that session or their associated account. This technical requirement complements the need to provide manual opt-out options, such as forms or dedicated privacy pages.<\/p>\n\n\n\n

Understanding GPC is crucial before examining specific examples of “Do Not Sell” pages, as it represents a distinct and equally important facet of CCPA\/CPRA compliance for eCommerce businesses.<\/p>\n\n\n\n

Methods of Opting Out<\/h2>\n\n\n\n

Another CCPA & CPRA rule states that merchants need to provide \u201ctwo or more designated methods for submitting requests\u201d. Therefore, we have reviewed 20 popular retailers\u2019 websites <\/strong>to provide you with ideas on implementing the \u201c<\/strong>Do Not Sell My Personal Information\u201d<\/strong> page<\/strong>.<\/p>\n\n\n\n

We have grouped the examples into categories, namely methods and of submitting opt-out requests. Let’s take a look at each of the methods.<\/p>\n\n\n\n