What should teams do about Sharing and Cross-Context Behavioral Advertising under the California CPRA?
Teams should first decide whether the business is 'sharing' personal information for cross-context behavioral advertising or otherwise selling or disclosing it in a way that triggers CPRA notice and opt-out duties. If the business shares personal information with third parties for cross-context behavioral advertising, it must provide the required opt-out path, notices, and supporting controls.
In practice, confirm the data flow, the third party's role, the consumer choice mechanism, and whether the page or workflow must honor an opt-out preference signal before launch.
- Write the Sharing and Cross-Context Behavioral Advertising decision in one sentence before drafting controls.
- Attach the external source URL and a short source quote to the evidence record.
- Route unclear cases to legal, privacy, security, or compliance review before launch.
Official California statutory source for opt-out preference signals, sale or sharing opt-outs, and cross-context behavioral advertising rulemaking authority.
Official CPPA regulations source for operational opt-out, sale, sharing, and consumer-right implementation requirements.
CPPA FAQ source for consumer privacy rights, including sale or sharing opt-out context under California privacy law.