§ 999.306. Notice of Right to Opt-Out of Sale of Personal Information.

FINAL REGULATION TEXT
TITLE 11. LAW
DIVISION 1. ATTORNEY GENERAL
CHAPTER 20. CALIFORNIA CONSUMER PRIVACY ACT REGULATIONS
§ 999.306. Notice of Right to Opt-Out of Sale of Personal Information.
(a) Purpose and General Principles
(1) The purpose of the notice of right to opt-out is to inform consumers of their right to
direct a business that sells their personal information to stop selling their personal
information.
(2) The notice of right to opt-out shall be designed and presented in a way that is easy to
read and understandable to consumers. The notice shall:
a. Use plain, straightforward language and avoid technical or legal jargon.
b. Use a format that draws the consumer’s attention to the notice and makes the
notice readable, including on smaller screens, if applicable.
c. Be available in the languages in which the business in its ordinary course provides
contracts, disclaimers, sale announcements, and other information to consumers in
California.
d. Be reasonably accessible to consumers with disabilities. For notices provided
online, the business shall follow generally recognized industry standards, such as
the Web Content Accessibility Guidelines, version 2.1 of June 5, 2018, from the
World Wide Web Consortium, incorporated herein by reference. In other
contexts, the business shall provide information on how a consumer with a
disability may access the notice in an alternative format.
(b) A business that sells the personal information of consumers shall provide the notice of right
to opt-out to consumers as follows:
(1) A business shall post the notice of right to opt-out on the Internet webpage to which
the consumer is directed after clicking on the “Do Not Sell My Personal Information”
link on the website homepage or the download or landing page of a mobile
application. In addition, a business that collects personal information through a
mobile application may provide a link to the notice within the application, such as
through the application’s settings menu. The notice shall include the information
specified in subsection (c) or link to the section of the business’s privacy policy that
contains the same information.