Add a Do Not Sell or Share link

The CPRA requires businesses to give California residents a clear and accessible way to opt out of the sale or sharing of their personal information. This is typically done through a “Do Not Sell or Share My Personal Information” link, which must be visible and functional across the site.

Placement Requirements

Display the link on the homepage and in the website footer.
Include it in privacy policies and preference centers.
Ensure it is equally prominent on mobile and desktop.

Functionality

Clicking the link should lead to a page or modal where users can submit an opt-out request.
Requests must be honored without requiring users to create an account.
The opt-out must apply across all devices and browsers where possible.

Example: Link Implementation

<a href="/privacy/do-not-sell">Do Not Sell or Share My Personal Information</a>

Opt-out form example

<form action="/privacy/optout" method="POST">
  <label>Email address:</label>
  <input type="email" name="email" required>
  <button type="submit">Opt Out</button>
</form>

Place the link on the homepage, footer, and privacy policy
Make the link equally accessible on mobile and desktop
Honor opt-out requests without forcing account creation
Apply opt-out across devices and sessions where possible
Keep a log of opt-out requests for compliance records

Conclusion

Adding a “Do Not Sell or Share My Personal Information” link is more than a checkbox—it demonstrates respect for consumer choice. By making the link prominent, functional, and user-friendly, companies meet CPRA obligations while reinforcing transparency and trust.

Set up sensitive data protections

Create user-friendly rights request flows

Add a Do Not Sell or Share link