CCPA policy framework

The CCPA/CPRA policy framework is designed for California visitors and supports the privacy rights defined in the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Key features

  • Personal Data tab – Allows users to opt out of the sale and sharing of personal data.
  • Do Not Sell or Share button – Directs users to the Personal Data tab to exercise their rights.
  • Opt-out configuration – Automatically unchecks all non-essential categories (except “Preferences” and “Necessary”) when a user opts out.
  • Global Privacy Control (GPC) – Detects GPC signals from the browser and applies them automatically.
  • IAB US Privacy Framework support – Communicates opt-out signals to third-party partners.

Setting up CCPA

  1. Add a region for California in Regional settings.
  2. Set the Policy framework to CookieHub Choices + CCPA.
  3. Customize dialog appearance, text, and category defaults.

See also: Regions and geo-targeting guide

Explicit consent with CCPA

When using explicit consent for CCPA regions, you may want to set all categories to Checked by default. This prevents users from unintentionally denying all categories if they don’t opt out manually.

How to adjust default check states

  1. Go to Regional settings in your domain configuration.
  2. Find the CCPA region and click Customize.
  3. Open the Categories tab.
  4. Set Checked by default to Yes for each category.