Adding the do not sell my data page

Introduction

One of the crucial stipulations of certain U.S. state privacy laws (CCPA / CPRA, VCDPA, CPA, CTDPA and UCPA for California, Virginia, Colorado, Connecticut and Utah respectively) is the "Do Not Sell My Personal Information" notice. If your store engages in the practice of selling personal information of consumers, it is mandatory to notify them during their initial visit to your website or application. This notification allows them the choice to exclude themselves from such a sale, should they desire to do so.

What does it mean to “sell” personal information under these laws

The interpretation of "sale" under these certain U.S. state privacy laws is extensive. It's not confined to transactions involving monetary exchange, but also includes any action that could potentially advantage the business through sharing a user's personal information. The state laws refers to this as "valuable consideration."

The notion of sale carries significant weight as it underpins the consumer's right to opt-out. A consumer retains the right to instruct a business to cease selling their personal information to third parties at any given moment.

The “Do Not Sell My Personal Information” notice and link

The "Do Not Sell My Personal Information" notice is essentially the execution of the right to opt-out. As previously mentioned, it's not mandatory to obtain consent from consumers to initiate the collection and sale of their data (though there are certain exceptions). However, it is compulsory to provide a straightforward method for consumers to opt-out.

This is where the "Do Not Sell My Personal Information" (DNSMPI) link comes into play. In order to add such a page to your Shopify store access the Settings inside the application and select the Do not sell my data option.

The “Do Not Sell My Personal Information” page

This page looks like this:



This page provides the current status and an option to opt-in or opt-out from selling data. Note that this call to action link is available only for visitors from certain U.S. states as mentioned above.

Also this option here works automatically when you have enabled the GPC integration.

Updated on: 29/02/2024