Configuring Opt-Out Requests for CCPA

Under the California Consumer Privacy Act (CCPA), organizations must provide consumers with a clear way to opt out of the sale or sharing of their personal information.

With OneTrust you can support CCPA opt-out requirements by configuring your web forms to allow opt-out requests to be submitted and processed without identity verification. This ensures a streamlined experience for consumers while helping your organization meet current regulatory expectations.

To Configure Verification Conditions for Opt-Out Requests

  1. On the Privacy Rights Automation menu, select Setup > Web forms. The Web form templates screen appears.

  2. Hover over the California CCPA Web Form template until the View button appears.
  3. Click the View button. The Web form customization screen appears.

  4. Click the Verification tab and expand the Verification methods section.
  5. Enable your preferred verification method and configure according to your preferences. You must select at least one method.


  6. Expand the Verification conditions section, and click the Add rule button.
    Important:

    You must enable at least one verification method to be able to enable the Add rule button.

  7. For Default verification method, select whichever verification method you would like to be applied if no rules are met.
  8. Configure your rule with the following settings:

    Field name

    Setting

    Rule name

    Add a name for your rule

    Field

    Select request type(s)

    Operator

    Equal to

    Value

    Request to Opt-Out (Do Not Sell or Share My Personal Information)

    Then perform the following tasks:

    • Verification

    No verification applied


  9. Click the Save button, and then republish the web form.