| Applicable to the following US states: | ||
|
|
|
The US state regulations message type is displayed to site visitors who are subject to privacy legislation specific to the state in which they’re located. For example, residents in California are subject to the California Privacy Rights Act (CPRA). Learn more about how Google helps publishers comply with US state privacy laws.
Structure of a message
A CPRA message contains multiple 'screens' (or 'pages') that are shown to users when they view your message.
Note: The look and feel of your 'Do Not Sell or Share' link may look different from the styling shown above.
CPRA messages include the following elements:
- Do Not Sell or Share link: The link to your CPRA message. Displays your 'Do Not Sell or Share My Personal Information' link using the formatting and settings you selected. When users click the link, the Confirm page opens and displays the 'Opt out of the sale of personal information' dialogue.
- Confirm page: The confirmation page of your CPRA message. Displays the 'Opt out of the sale or sharing of personal information' dialogue. Users can click the buttons to confirm their decision.
- Logo: Your site or app's logo. To include a logo here, add a logo to your message.
-
'Dismiss' button: Allows users to dismiss the message without opting out of the 'sale or sharing' of their 'personal information' (as the law defines those terms). Closes the message.
-
'Opt out' button: Allows users to opt out of the 'sale or sharing' of their 'personal information' (as the law defines those terms). When users click the 'Opt out' button, the message communicates their opt-out status to Google. Closes the message.
Support for the IAB Global Privacy Platform (GPP) specification
US state regulations messages support the IAB Global Privacy Platform (GPP) specification. The US National section will be used to store and transmit the choices of users in the following US states: California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah and Virginia.
When the 'Do not sell/share' link is shown on the page:
SharingNotice,SaleOptOutNotice,SharingOptOutNoticeandTargetedAdvertisingOptOutNoticeare set to indicate that notice was provided.SaleOptOut,SharingOptOut, andTargetedAdvertisingOptOutare set to indicate that the user did not opt out.MspaCoveredTransactionis set to 'No'.
If a user opts out:
SaleOptOut,SharingOptOutandTargetedAdvertisingOptOutare updated to indicate that the user opted out.- All other fields are set to 'Not applicable', including those for
SensitiveDataProcessingandKnownChildSensitiveDataConsents.
Publishers should work with their ad partners to understand how they respect GPP signals. Learn more about Google Ad Manager’s support of GPP.
Updates to CPRA from CCPA
CPRA is now in effect. This means that users can opt out of the sale and sharing of their personal information. If you were using default text in your CCPA messaging, we have automatically updated your US state regulations message to read: 'Do not sell or share my personal information'. If you previously set a custom CCPA message, we suggest that you revise your US state regulations message text in light of the CPRA requirements.
