AI Search

A-D States

This topic provides the technical implementation of opt-outs covered under the U.S. state data privacy regulations, currently under MSPA from Alabama to Delaware. 

California (CCPA)

Businesses must include a 'do not sell my personal information' link on their homepage and all web pages collecting data. The opt-out link should provide comprehensive details about consumer rights and enable them to decline the sale and sharing of their personal information.

 
Field name GPP Field Type Description Auto-display consent screen or via link Do not Auto-display consent screen
SaleOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of the Sale of the Consumer's Personal Information

0 Not Applicable. The Business does not sell personal data.

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web.

This field will be set as 2 for both apps and web.
SharingOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of the Sharing of the Consumer's Personal Information

0 Not Applicable. The Business does not Share Personal Data.

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web.

This field will be set as 2 for both apps and web.
SensitiveDataLimitUseNotice Int(2)

Notice of the Opportunity to Limit Use or Disclosure of the Consumer's Sensitive Personal Information

0 Not Applicable. The Business does not use or disclose Sensitive Data.

1 Yes, notice was provided

2 No, notice was not provided
This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
SaleOptOut Int(2)

Opt-Out of the Sale of the Consumer's Personal Information

0Not Applicable. SaleOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out

This field will be set as 2 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

SharingOptOut Int(2)

Opt-Out of the Sharing of the Consumer's Personal Information

0 Not Applicable. SharingOptOutNotice value was not applicable or no notice was provided.

Opted Out

Did Not Opt Out

This field will be set as 2 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

SensitiveDataProcessing N-Bitfield(2,9)

Two bits for each Data Activity:

0 Not Applicable. SensitiveDataLimitUseNotice value was not applicable or no notice was provided.

1 Opted Out

2 Did Not Opt Out

Data Activities:

(1) Opt-Out of the Use or Disclosure of the Consumer's Sensitive Personal Information Which Reveals a Consumer's Social Security, Driver's License, State Identification Card, or Passport Number.

(2) Opt-Out of the Use or Disclosure of the Consumer's Sensitive Personal Information Which Reveals a Consumer's Account Log-In, Financial Account, Debit Card, or Credit Card Number in Combination with Any Required Security or Access Code, Password, or Credentials Allowing Access to an Account.

(3) Opt-Out of the Use or Disclosure of the Consumer's Sensitive Personal Information Which Reveals a Consumer's Precise Geolocation.

(4) Opt-Out of the Use or Disclosure of the Consumer's Sensitive Personal Information Which Reveals a Consumer's Racial or Ethnic Origin, Religious or Philosophical Beliefs, or Union Membership.

(5) Opt-Out of the Use or Disclosure of the Consumer's Sensitive Personal Information Which Reveals the contents of a Consumer's Mail, Email, and Text Messages unless You Are the Intended Recipient of the Communication.

(6) Opt-Out of the Use or Disclosure of the Consumer's Sensitive Personal Information Which Reveals a Consumer's Genetic Data.

(7) Opt-Out of the Use or Disclosure of the Consumer's Sensitive Personal Information Consisting of Biometric Information for the Purpose of Uniquely Identifying a Consumer.

(8) Opt-Out of the Use or Disclosure of the Consumer's Sensitive Personal Information Consisting of Personal Information Collected and Analyzed Concerning a Consumer's Health.

(9) Opt-Out of the Use or Disclosure of the Consumer's Sensitive Personal Information Consisting of Personal Information Collected and Analyzed Concerning a Consumer's Sex Life or Sexual Orientation.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

PersonalDataConsents Int(2)

Consent to Collection, Use, Retention, Sale, and/or Sharing of the Consumer's Personal Data that Is Unrelated to or Incompatible with the Purpose(s) for which the Consumer's Personal Data Was Collected or Processed

0 Not Applicable. The Business does not use, retain, Sell, or Share the Consumer's Personal Data for advertising purposes that are unrelated to or incompatible with the purpose(s) for which the Consumer's Personal Data was collected or processed.

1 No Consent

2 Consent

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

KnownChildSensitiveDataConsents

N-Bitfield(2,2)

Two bits for each Data Activity:

0 Not Applicable. The Business does not have actual knowledge that it Processes Personal Information of Consumers Less Than 16 years of Age.

1 No Consent

2 Consent

Data Activities:

(1) Consent to Sell the Personal Information of Consumers Less Than 16 years of Age

(2) Consent to Share the Personal Information of Consumers Less Than 16 years of Age

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

Colorado (CPA)

Companies are obligated to provide consumers the choice to opt-out of the sale or targeted advertising use of their personal data. Consumers can express their preferences through a Universal Opt-Out Mechanism (UOOM).

 
Field name GPP Field Type Description Auto-display consent screen or via link Do not Auto-display consent screen
SaleOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of the Sale of the Consumer's Personal Information

0 Not Applicable. The Business does not sell personal data.

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web.

This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.

SharingNotice Int(2)

Notice of the Sharing of Personal Data with Third Parties

0 Not Applicable. The Controller does not share Personal Data with Third Parties.

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
TargetedAdvertisingOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of Processing of the Consumer's Personal Data for Targeted Advertising

0 Not Applicable.The Controller does not Process Personal Data for Targeted Advertising.

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
SaleOptOut Int(2)

Opt-Out of the Sale of the Consumer's Personal Information

Not Applicable. SaleOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

Sharing OptOut Int(2)

Opt-Out of the Sharing of the Consumer's Personal Information

Not Applicable. SaleOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

TargetedAdvertisingOptOut Int(2)

Opt-Out of Processing the Consumer's Personal Data for Targeted Advertising

0 Not Applicable. TargetedAdvertisingOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

SensitiveDataProcessing N-Bitfield(2,7)

Two bits for each Data Activity:

0 Not Applicable. The Controller does not Process the specific category of Sensitive Data.

1 No Consent

2 Consent

(1) Consent to Process the Consumer's Sensitive Data Consisting of Personal Data Revealing Racial or Ethnic Origin.

(2) Consent to Process the Consumer's Sensitive Data Consisting of Personal Data Revealing Religious Beliefs.

(3) Consent to Process the Consumer's Sensitive Data Consisting of Personal Data Revealing a Mental or Physical Health Condition or Diagnosis.

(4) Consent to Process the Consumer's Sensitive Data Consisting of Personal Data Revealing Sex Life or Sexual Orientation.

(5) Consent to Process the Consumer's Sensitive Data Consisting of Personal Data Revealing Citizenship or Citizenship Status.

(6) Consent to Process the Consumer's Sensitive Data Consisting of Genetic Data that May Be Processed for the Purpose of Uniquely Identifying an Individual.

(7) Consent to Process the Consumer's Sensitive Data Consisting of Biometric Data that May Be Processed for the Purpose of Uniquely Identifying an Individual.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

KnownChildSensitiveDataConsents

Int(2)

Consent to Process Sensitive Data from a Known Child

0 Not Applicable. The Controller does not Process Sensitive Data of a known Child.

1 No Consent

2 Consent

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

Connecticut (CTDPA)

As per the law, data controllers must provide "clear and conspicuous" opt-out links on their websites.

 
Field name GPP Field Type Description Auto-display consent screen or via link Do not Auto- display consent screen
SaleOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of the Sale of the Consumer's Personal Information

0 Not Applicable. The Business does not sell personal data.

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web.

This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.

SharingNotice Int(2)

Notice of the Sharing of Personal Data with Third Parties

0 Not Applicable. The Controller does not share Personal Data with Third Parties.

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
TargetedAdvertisingOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of Processing of the Consumer's Personal Data for Targeted Advertising

0 Not Applicable.The Controller does not Process Personal Data for Targeted Advertising.

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
SaleOptOut Int(2)

Opt-Out of the Sale of the Consumer's Personal Information

0 Not Applicable. SaleOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

SharingOptOut Int(2)

Opt-Out of the Sharing of the Consumer's Personal Information

0 Not Applicable. SaleOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

TargetedAdvertisingOptOut Int(2)

Opt-Out of Processing the Consumer's Personal Data for Targeted Advertising

0 Not Applicable. TargetedAdvertisingOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

SensitiveDataProcessing N-Bitfield(2,8)

Two bits for each Data Activity:

0 Not Applicable. The Controller does not Process the specific category of Sensitive Data.

1 Opted Out

2 Did Not Opt Out

(1) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Racial or Ethnic Origin.

(2) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Religious Beliefs.

(3) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Sexual Orientation.

(4) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Citizenship or Immigration Status.

(5) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Medical History, Mental or Physical Health Condition, or Medical Treatment or Diagnosis by a Health Care Professional.

(6) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Genetic Data for the Purpose of Identifying a Specific Individual.

(7) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Biometric Data for the Purpose of Identifying a Specific Individual.

(8) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Specific Geolocation Data.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

KnownChildSensitiveDataConsents

N-Bitfield(2,3)

Two bits for each Data Activity:

0 Not Applicable. The Controller does not Process Sensitive Data of a known Child.

1 No Consent

2 Consent

(1) Consent to Process Sensitive Data from a Known Child.

(2) Consent to Sell the Personal Data of Consumers At Least 13 Years of Age but Younger Than 16 Years of Age.

(3) Consent to Process the Personal Data of Consumers At Least 13 Years of Age but Younger Than 16 Years of Age for Purposes of Targeted Advertising.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

Delaware (DPDPA)

Controllers must give consumers a clear privacy notice explaining what data is collected, how it’s used and shared, and how they can opt out of data sales or targeted ads, as well as exercise their privacy rights. 

 
Field name GPP Field Type Description Auto-display consent screen or via link Do not Auto-display consent screen
ProcessingNotice Int(2)

Notice of the Processing of Personal Data.

0 Not Applicable, The Controller does not Process Personal Data.

1 Yes, notice was provided

2 No, notice was not provided
This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
SaleOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of the Sale of the Consumer’s Personal Data

0 Not Applicable, The Controller does not Sell Personal Data

1 Yes, notice was provided

2 No, notice was not provided
This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
TargetedAdvertisingOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of Processing of the Consumer’s Personal Data for Targeted Advertising

0 Not Applicable, the Controller does not Process Personal Data for Targeted Advertising

1 Yes, notice was provided

2 No, notice was not provided
This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
TargetedAdvertisingOptOut Int(2)

Opt-Out of Processing the Consumer’s Personal Data for Targeted Advertising

0 Not Applicable, TargetedAdvertisingOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
SaleOptOut Int(2)

Opt-Out of the Sale of the Consumer's Personal Data

Not Applicable, SaleOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

SensitiveDataProcessing N-Bitfield(2,9)

Two bits for each Data Activity:

0 Not Applicable, the Controller does not Process the specific category of Sensitive Data.

1 No Consent

2 Consent

(1) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Racial or Ethnic Origin.

(2) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Religious Beliefs.

(3) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing a Mental or Physical Health Condition or Diagnosis (Including Pregnancy).

(4) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Sex Life or Sexual Orientation.

(5) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Citizenship or Immigration Status..

(6) Consent to Process the Consumer’s Sensitive Data Consisting of Genetic Data.

(7) Consent to Process the Consumer’s Sensitive Data Consisting of Biometric Data.

(8) Consent to Process the Consumer’s Sensitive Data Consisting of Precise Geolocation Data.

(9) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Status as Transgender or Nonbinary.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

AdditionalDataProcessingConsent Int(2)

Consent to Processing of the Consumer’s Personal Data that Is Not Reasonably Necessary for nor Compatible with the Disclosed Purpose(s) for which the Consumer’s Personal Data Was Processed

0 = Not Applicable, the Controller does not Process Personal Data that is Not Reasonably Necessary for nor Compatible with the Disclosed Purpose(s)

1 No Consent

2 Consent

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

KnownChildSensitiveDataConsents

N-Bitfield(2,5)

Two bits for each Data Activity:

0 Not Applicable, the Controller does not Process Sensitive Data of a known Child.

1 No Consent

2 Consent

Data Activities:

(1) Consent to Process Sensitive Data from a Known Child.

(2) Consent to Sell the Personal Data of Consumers At Least 13 Years of Age but Younger Than 16 Years of Age.

(3) Consent to Process the Personal Data of Consumers At Least 13 Years of Age but Younger Than 16 Years of Age for Purposes of Targeted Advertising.

(4) onsent to Sell the Personal Data of Consumers At Least 16 Years of Age but Younger Than 18 Years of Age.

(5) Consent to Process the Personal Data of Consumers At Least 16 Years of Age but Younger Than 18 Years of Age for Purposes of Targeted Advertising.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the consent screen is triggered by the end-user, for both web and apps.

On This Page

Last Updated on: 24 Jul, 2025