What do CCPA and CPRA require for opt-out of sale or sharing?

The CCPA, as amended by the CPRA, gives California consumers the right to opt out of the sale or sharing of their personal information. Businesses must provide a clear Do Not Sell or Share My Personal Information control. ConsentX ships this control and applies the opt-out so non-essential trackers stay blocked once a visitor opts out.

Does ConsentX honor the Global Privacy Control?

Yes. ConsentX reads the Global Privacy Control signal sent by a visitor's browser and treats it as a request to opt out of sale and sharing, so a browser-level opt-out is honored automatically without the visitor clicking anything.

Can I run CCPA for California and GDPR or DPDPA elsewhere at the same time?

Yes. The Region Rule Engine shows the CCPA experience to California visitors and applies the right legal basis and banner behavior for GDPR, UK GDPR, DPDPA and other frameworks per visitor, all from one dashboard without shipping code.

Is there a free plan and how fast is setup?

Yes. The Free plan covers one website forever with no credit card, and setup takes about five minutes with a single script tag.

California · CCPA / CPRA

CCPA and CPRA consent, built for California

Q: Does it issue consent or opt-out records for audits?

Yes. ConsentX can issue a consent receipt and binds every consent and opt-out into a per-record SHA-256 hash chain you can verify, so you can demonstrate exactly what a person chose and when during an audit.

Opt-out of sale and sharing, a Do Not Sell or Share control, Global Privacy Control handling, consent receipts and tamper-evident evidence. Live in about five minutes.

Get started free Book a demo

Free forever for one site. No credit card.

yoursite.com

California visitor · CCPA rules applied

Your privacy choices

We ask before we use non-essential cookies. You can opt out of the sale or sharing of your personal information, and we honor Global Privacy Control.

Allow allReject non-essentialManage preferences

Consent recorded

sha256 · chain ok

CCPA and CPRA are in force

Many consent tools miss what California asks for

California has its own rules: a real opt-out of sale and sharing, a Do Not Sell or Share control, and Global Privacy Control handling. A generic banner built for opt-in consent leaves those gaps open.

Opt-out of sale

Californians can opt out of the sale or sharing of their personal information.

Honor GPC

the Global Privacy Control browser signal must be treated as an opt-out request.

Prove the choice

you should be able to demonstrate an opt-out or consent, not just claim it.

CCPA, handled the way the law is written

Native support for the parts of CCPA and CPRA that generic tools skip.

Opt-out of sale and sharing, plus GPC

CCPA and CPRA give Californians the right to opt out of the sale or sharing of personal information. ConsentX gives them a clear Do Not Sell or Share My Personal Information control and reads the Global Privacy Control signal so a browser-level opt-out is honored automatically.

Geo-aware banner for California and beyond

A database-backed Region Rule Engine shows the CCPA experience to California visitors and applies the right framework everywhere else, all from the dashboard without a redeploy.

Receipts and tamper-evident evidence

Issue a consent receipt and bind every choice into a per-record SHA-256 hash chain you can verify. When you need to demonstrate an opt-out or a consent, you have provable evidence, not just a stored row.

Data subject requests with SLA timers

Handle access, deletion, correction and opt-out requests with built-in SLA timers set to the CCPA 45-day window, so requests are tracked and closed on time from one place.

CCPA-ready, and ready for every other framework you serve

CCPA / CPRA GDPR UK GDPR DPDPA LGPD PIPEDA PDPA POPIA

Generic consent tool vs CCPA-ready ConsentX

Generic tool

✕ Built for opt-in, weak on opt-out
✕ No clear Do Not Sell or Share control
✕ Ignores Global Privacy Control
✕ Stores a row, hard to demonstrate

ConsentX

Opt-out of sale and sharing built in
Do Not Sell or Share My Personal Information control
Honors the Global Privacy Control signal
Tamper-evident SHA-256 evidence chain

ConsentX helps you comply with the CCPA and CPRA. It does not by itself guarantee compliance. Verify your configuration against your own legal advice.

CCPA consent questions

Get CCPA-ready for your California visitors

Launch consent built for California in minutes. Free to start, no credit card.

Get started free Book a demo