What does “Do Not Sell My Personal Information” mean under the CPRA (CCPA amendment)? And how do you create a CCPA DNSMPI link?
In this post, we’ll answer all these questions and more.
The “Do Not Sell My Personal Infomation” notice is one of CCPA’s key requirements.
If your business is selling consumers’ personal information, they must be clearly informed upon their first visit to your website or app. In this way, they can opt-out of the sale, if they wish to.
But what is a “sale” under the CCPA?
This article is a part of our series on CCPA and CCPA compliance. Read also:
👉 California Privacy Laws: What You Need To Know and How To Comply
CCPA’s definition of sale is quite broad. It doesn’t refer only to the act of exchanging for money, but to every action that could benefit the business, if the user’s personal information is shared. The CCPA calls this valuable consideration.
The concept of sale is so important because it’s the base of the consumer’s right to opt-out: a consumer has the right, at any time, to tell a business which sells their personal information to third parties that they must stop.
You can learn more about this topic here.
The “Do Not Sell My Personal Information” notice is the practical application of the right to opt-out.
As we said, you don’t need to ask consumers to opt-in to start collecting and selling their data (though there are some exceptions), but you do need to provide an easily accessible way to opt-out.
That is the “Do Not Sell My Personal Information” (“DNSMPI“) link.
If a business receives a “Do Not Sell” request from a consumer, it can no longer sell the consumer’s personal information, unless the consumer opts-in again, providing an express authorization.
From their side, businesses may only ask for a consumer’s authorization one more time, and only 12 months after the consumer have opted-out.
In order to comply with CCPA’s DNSMPI and opt-out requirements, you need to, at a minimum:
iubenda’s set of solutions can help you comply with CCPA, in minutes!
Our Privacy and Cookie Policy Generator allows you to:
With our Privacy Controls and Cookie Solution, you can display a “Do Not Sell My Personal Information” notice and easily manage opt-outs.
More specifically, it allows you to:
The best part? The Privacy Controls and Cookie Solution is completely free for CCPA compliance. Create your DNSMPI notice and link in minutes.
