AI Search

O-T States

This topic provides the technical implementation of opt-outs covered under the U.S. state data privacy regulations, currently under MSPA from Ohio to Texas.

Oregon (OCPA)

Businesses/controllers must provide consumers with a reasonably accessible, clear, and meaningful privacy notice outlining the categories of personal data for processing, the third parties with which they share the personal data, and how consumers can contact the controller to exercise their rights.

 
Field name GPP Field Type Description Auto-display consent screen or via link Do no Auto-display consent screen
SaleOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of the Sale of the Consumer’s Personal Data 

0 Not Applicable, The Controller does not Sell Personal Data

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web.

This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.

 

SharingNotice Int(2)

Notice of the Processing of Personal Data.

0 Not Applicable, The Controller does not Process Personal Data

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
TargetedAdvertisingOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of Processing of the Consumer’s Personal Data for Targeted Advertising

0 Not Applicable, the Controller does not Process Personal Data for Targeted Advertising

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
SaleOptOut Int(2)

Opt-Out of the Sale of the Consumer’s Personal Data

0 Not Applicable, SaleOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

TargetedAdvertisingOptOut Int(2)

Opt-Out of Processing the Consumer’s Personal Data for Targeted Advertising

0 Not Applicable, TargetedAdvertisingOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

SensitiveDataProcessing N-Bitfield(2,11)

Two bits for each Data Activity:

0 Not Applicable, the Controller does not Process the specific category of Sensitive Data

1 Opted Out

2 Did Not Opt Out

(1) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Racial or Ethnic Origin.

(2) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Religious Beliefs.

(3) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing a Mental or Physical Health Condition or Diagnosis.

(4) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Sex Life or Sexual Orientation.

(5) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Status as Transgender or Nonbinary.

(6) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Citizenship or Immigration Status.

(7) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing National Origin.

(8)  Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Status as Victim of a Crime.

(9) Consent to Process the Consumer’s Sensitive Data Consisting of Genetic Data.

(10) Consent to Process the Consumer’s Sensitive Data Consisting of Biometric Data.

(11) Consent to Process the Consumer’s Sensitive Data Consisting of Precise Geolocation Data.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

KnownChildSensitiveDataConsents

N-Bitfield(2,3)

0 Not Applicable, the Controller does not Process Sensitive Data of a known Child

1 No Consent

2 Consent

(1) Consent to Process Sensitive Data from a Known Child.

(2) Consent to Sell the Personal Data of Consumers At Least 13 Years of Age but Younger Than 16 Years of Age.

(3) Consent to Process the Personal Data of Consumers At Least 13 Years of Age but Younger Than 16 Years of Age for Purposes of Targeted Advertising.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

AdditionalDataProcessingConsent Int(2)

Consent to Processing of the Consumer’s Personal Data that Is Not Reasonably Necessary for nor Compatible with the Disclosed Purpose(s) for which the Consumer’s Personal Data Was Processed

0 Not Applicable, the Controller does not Process Personal Data that is Not Reasonably Necessary for nor Compatible with the Disclosed Purpose(s)

No Consent

2 Consent

This field will be set as 1 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

Tenesse (TIPA)

As per the law, data controllers must provide "clear and conspicuous" opt-out links on their websites.

 
Field name GPP Field Type Description Auto-display consent screen or via link Do not Auto- display consent screen

ProcessingNotice

Int(2)

Notice of the Processing of Personal Data.

0 Not Applicable, the Controller does not Process Personal Data

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web.

This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.

SaleOptOutNotice

Int(2)

Notice of the Opportunity to Opt Out of the Sale of the Consumer’s Personal Data 

0 Not Applicable, the Controller does not Sell Personal Data

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
TargetedAdvertisingOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of Processing of the Consumer’s Personal Data for Targeted Advertising

0 Not Applicable.The Controller does not Process Personal Data for Targeted Advertising.

1 Yes, notice was provided

2 No, notice was not provided

This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
SaleOptOut Int(2)

Opt-Out of the Sale of the Consumer's Personal Information

0 Not Applicable. SaleOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out

This field will be set as 2 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

TargetedAdvertisingOptOut Int(2)

Opt-Out of Processing the Consumer's Personal Data for Targeted Advertising

0 Not Applicable. TargetedAdvertisingOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out

This field will be set as 2 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

SensitiveDataProcessing N-Bitfield(2,8)

Two bits for each Data Activity:

0 Not Applicable. The Controller does not Process the specific category of Sensitive Data.

1 Opted Out

2 Did Not Opt Out

(1) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Racial or Ethnic Origin.

(2) Opt-Out of the Processing of the Consumer's Sensitive Data Consisting of Personal Data Revealing Religious Beliefs.

(3) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing a Mental or Physical Health Diagnosis.

(4) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Sexual Orientation.

(5) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Citizenship or Immigration Status.

(6) Consent to Process the Consumer’s Sensitive Data Consisting of Genetic Data for the Purpose of Uniquely Identifying an Individual.

(7) Consent to Process the Consumer’s Sensitive Data Consisting of Biometric Data for the Purpose of Uniquely Identifying an Individual.

(8) Consent to Process the Consumer’s Sensitive Data Consisting of Precise Geolocation Data.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

KnownChildSensitiveDataConsents

Int(2)

Consent to Process Personal Data from a Known Child.

0 Not Applicable. The Controller does not Process Sensitive Data of a known Child.

1 No Consent

2 Consent

This field will be set as 1 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

AdditionalDataProcessingConsent Int(2)

Consent to Processing of the Consumer’s Personal Data that Is Not Reasonably Necessary for nor Compatible with the Disclosed Purpose(s) for which the Consumer’s Personal Data Was Processed.

0 Not Applicable, the Controller does not Process Personal Data that is Not Reasonably Necessary for nor Compatible with the Disclosed Purpose(s)

1 No Consent

2 Consent

This field will be set as 1 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

Texas (TDPSA)

Businesses must provide a mechanism for consumers to revoke consent that is as easy as the mechanism to provide consent.

 
Field name GPP Field Type Description Auto-display consent screen or via link Do not Auto-display consent screen 
ProcessingNotice Int(2)

Notice of the Processing of Personal Data.

0 Not Applicable, The Controller does not Process Personal Data.

1 Yes, notice was provided

2 No, notice was not provided
This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
SaleOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of the Sale of the Consumer’s Personal Data

0 Not Applicable, The Controller does not Sell Personal Data

1 Yes, notice was provided

2 No, notice was not provided
This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
TargetedAdvertisingOptOutNotice Int(2)

Notice of the Opportunity to Opt Out of Processing of the Consumer’s Personal Data for Targeted Advertising

0 Not Applicable, the Controller does not Process Personal Data for Targeted Advertising

1 Yes, notice was provided

2 No, notice was not provided
This field will be set as 1 for both apps and web. This field will be set as 2 till the user clicks on the opt-out link, for both apps and web.
TargetedAdvertisingOptOut Int(2)

Opt-Out of Processing the Consumer’s Personal Data for Targeted Advertising

0 Not Applicable, TargetedAdvertisingOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web. This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.
SaleOptOut Int(2)

Opt-Out of the Sale of the Consumer's Personal Data

Not Applicable, SaleOptOutNotice value was not applicable or no notice was provided

1 Opted Out

2 Did Not Opt Out
This field will be set as 2 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

SensitiveDataProcessing N-Bitfield(2,8)

Two bits for each Data Activity:

0 Not Applicable, the Controller does not Process the specific category of Sensitive Data.

1 No Consent

2 Consent

(1) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Racial or Ethnic Origin.

(2) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Religious Beliefs.

(3) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing a Mental or Physical Health Condition or Diagnosis.

(4) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Sex Life or Sexual Orientation.

(5) Consent to Process the Consumer’s Sensitive Data Consisting of Personal Data Revealing Citizenship or Immigration Status.

(6) Consent to Process the Consumer’s Sensitive Data Consisting of Genetic Data.

(7) Consent to Process the Consumer’s Sensitive Data Consisting of Biometric Data.

(8) Consent to Process the Consumer’s Sensitive Data Consisting of Precise Geolocation Data.

This field will be set as 1 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

AdditionalDataProcessingConsent Int(2)

Consent to Processing of the Consumer’s Personal Data that Is Not Reasonably Necessary for nor Compatible with the Disclosed Purpose(s) for which the Consumer’s Personal Data Was Processed0 = Not Applicable, the Controller does not Process Personal Data that is Not Reasonably Necessary for nor Compatible with the Disclosed Purpose(s)

1 No Consent

2 Consent

This field will be set as 1 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

KnownChildSensitiveDataConsents

Int(2))

Two bits for each Data Activity:

0 Not Applicable, the Controller does not Process Sensitive Data of a known Child.

1 No Consent

2 Consent

This field will be set as 1 for both apps and web.

This field will be set as 0 till the user clicks on the opt-out link, for both apps and web.

On This Page

Last Updated on: 24 Jul, 2025