Overview
Under the California Consumer Privacy Act (CCPA) and its amendment, the CPRA, businesses that "sell" or alternative personal information, including for cross-context behavioral advertising, must provide a clear and conspicuous link titled "Do Not Sell or Share My Personal Information." This link must be available on the homepage and on any page where personal information is collected.
ObservePoint automates the validation of this requirement, ensuring that the opt-out path is consistently available to consumers across your entire digital presence.
Why It Is Important
Per-Page Liability: Unlike some regulations that look at the site as a whole, a missing opt-out link is often treated as a violation for every page it is absent from, significantly increasing potential fine totals.
Broad Definition of "Sell/Share": Many organizations inadvertently "share" data via third-party marketing tags (like Meta or Google pixels). If these are present, the link is mandatory.
Regulatory Focus: The California Privacy Protection Agency (CPPA) actively audits for this link as a primary indicator of a business's compliance posture.
Implementation
Use ObservePoint to audit for the presence and functionality of your opt-out link:
Configure a Site-Wide Audit: Run an Audit across your domain to scan footers and headers where the link is typically housed.
Check the pre-built ObservePoint report for Pages missing Do Not Sell or Alternative Opt Out Links
Any page returned in the report above is missing the Do Not Sell or Alternative Opt-Out link.
Remediation
If the link is missing from any audited pages:
Standardize the Footer: Ensure the link is integrated into the global footer component of your web templates so it propagates to all new pages automatically.
Verify Visibility: Ensure the link is not hidden behind other elements (like a cookie banner that hasn't been dismissed) or rendered in a font color that lacks sufficient contrast.
Coordinate with Ad Ops: If certain landing pages or microsites are managed by different teams, ensure they are updated to include the mandatory compliance links.
Re-Test with LiveScan: After updates, use LiveScan on failing pages to confirm the link is now discoverable by automated crawlers.
Conclusion
The "Do Not Sell or Alternative Opt-out link is the cornerstone of consumer control under CCPA. Because digital sites are constantly updated, a link that exists today might be accidentally removed tomorrow during a site redesign.
ObservePoint provides the continuous monitoring necessary to ensure you remain compliant as your site evolves.