- California
- Colorado
- Connecticut
- Delaware
- Iowa
- Montana
- Nebraska
- New Hampshire
- New Jersey
- Oregon
- Texas
- Utah
- Virginia
The US state regulations message type is displayed to users who are subject to privacy legislation specific to the state in which they’re located. For example, residents in California are subject to the California Privacy Rights Act (CPRA). Learn more about how Google helps publishers comply with US state privacy laws .
Structure of a message
A US state regulations message contains multiple "screens" (or "pages") that are shown to users when they view your message.
US state regulations messages include the following elements:
- Do Not Sell or Share link: The link to your US state regulations message. Displays your "Do Not Sell or Share My Personal Information" link using the formatting and settings you selected. When users click the link, the Confirm page opens and displays the "Opt out of the sale or sharing of personal information" dialog.
- Confirm page: The confirmation page of your US state regulations message. Displays the "Opt out of the sale or sharing of personal information" dialog. Users can click the buttons to confirm their decision.
- Logo: Your site or app's logo. To include a logo here, add a logo to your message.
- " Dismiss" button: Allows users to dismiss the message without opting out of the “sale or sharing” of their “personal information” (as the law defines those terms). Closes the message.
- "Opt out" button: Allows users to opt out of the “sale or sharing” of their “personal information” (as the law defines those terms). When users click the "Opt out" button, the message communicates their opt-out status to Google. Closes the message.
Support for the IAB Global Privacy Platform (GPP) specification
US state regulations messages support the IAB Global Privacy Platform (GPP) specification . The US National section will be used to store and transmit the choices of users in the following US states: California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia.
When the "Do Not Sell or Share My Personal Information" link is shown on the page:
-
SharingNotice
,SaleOptOutNotice
,SharingOptOutNotice
, andTargetedAdvertisingOptOutNotice
are set to indicate that notice was provided. -
SaleOptOut
,SharingOptOut
, andTargetedAdvertisingOptOut
are set to indicate the user did not opt out. -
MspaCoveredTransaction
is set to "No."
If a user opts out:
-
SaleOptOut
,SharingOptOut
, andTargetedAdvertisingOptOut
are updated to indicate that the user opted out. - All other fields are set to "Not applicable," including those for
SensitiveDataProcessing
andKnownChildSensitiveDataConsents
.
Publishers should work with their ad partners to understand how they respect GPP signals. Learn more about Google Ad Manager’s support of GPP .
Updates to CPRA from CCPA
CPRA is now in effect. This means that users can opt out of the sale and sharing of their personal information. If you were using default text in your CCPA messaging, we have automatically updated your US state regulations message to read: “Do Not Sell or Share My Personal Information.” If you previously set a custom CCPA message, we suggest you revise your US state regulations message text in light of the CPRA requirements.