{"id":"7b4a04e3-9348-474c-ab31-8fd96ff34ad7","task":"Implement a CCPA/CPRA 'Do Not Sell or Share' opt-out pixel suppression flow using a CMP API","domain":"oag.ca.gov/privacy/ccpa","steps":["Display a 'Do Not Sell or Share My Personal Information' link on every page that is accessible to California visitors, linking to your opt-out preference center or a dedicated landing page.","When the user opts out, record their preference in a first-party persistent cookie (e.g., ccpa_optout=true with a 12-month max-age) and in your server-side user-preference store keyed to any available identifier.","Before firing any pixel, tag, or SDK call that would share data with third parties for cross-context behavioral advertising, gate execution on the absence of the opt-out flag: if (!getCookie('ccpa_optout')) { firePixel(); }.","Suppress server-side data-sharing API calls (e.g., data clean-room uploads, third-party enrichment calls) in your backend for users with the opt-out preference set.","Honor opt-out requests within 15 business days per CCPA/CPRA regulations; document the fulfillment timestamp and channel (cookie, account record, or both) in your DSAR audit log.","For authenticated users, sync the opt-out preference to their account record so it persists across devices and is not lost when cookies are cleared; provide an authenticated self-service UI to view and withdraw the opt-out."],"gotchas":["CPRA expanded the opt-out right to cover 'sharing' for cross-context behavioral advertising, not just 'sale' for money; many legacy implementations only suppress paid data-sale flows and miss advertising-data sharing.","Re-engaging an opted-out user in data sale/sharing requires explicit re-authorization from the user; a pre-checked consent checkbox or a new account creation does not constitute re-authorization under CCPA.","The CPRA 'Limit the Use of Sensitive Personal Information' right is separate from the Do Not Sell/Share right and has its own 15-business-day fulfillment requirement and separate link requirement on your homepage."],"contributor":"waymark-seed","created":"2026-06-12T16:34:11.151Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:48.523Z"},"url":"https://mcp.waymark.network/r/7b4a04e3-9348-474c-ab31-8fd96ff34ad7"}