CCPA/CPRA § 7004
Requirements for Methods for Submitting CCPA Requests and Obtaining Consumer Consent
The Privisy audit tests this section. See the checks
- Source
- Regulation
- In force from
- January 1, 2026
- Last reviewed
- September 2026
- Framework
- CCPA/CPRA
What it requires
Businesses must design and implement methods for submitting CCPA requests and obtaining consumer consent that are easy to understand, symmetrical in choice (the more privacy-protective path must be no longer or harder than the less protective path), free of confusing language or double-negatives, free of choice architecture that impairs consumer decisions, and easy to execute without unnecessary burden. A method that does not comply may be a dark pattern; any consent obtained through a dark pattern is void.
Regulation text
(2) Symmetry in choice. The path for a consumer to exercise a more privacy-protective option shall not be longer or more difficult or time-consuming than the path to exercise a less privacy-protective option because that would impair or interfere with the consumer's ability to make a choice.
California Consumer Privacy Act / California Privacy Rights Act, § 7004Read the full section from California Privacy Protection Agency (CalPrivacy)
How Privisy tests it
- Symmetry of Choice
Opt-out must require no more steps than opt-in (§ 7004(a)(2))
- No Direct Accept/Reject Choice
A settings-only control with no top-level Reject is the unequal-path pattern (§ 7004(a)(2))
- Pre-Consent Tracking
Choice architecture must not impair consumer choice (§ 7004(a))
- Global Privacy Control (GPC) Signal
Consent that overrides the signal must meet § 7004 consent requirements
- Consent Mechanism Effectiveness
A cosmetic reject button breaks symmetry of choice (§ 7004(a)(2))
- Privacy Request Mechanism
Request methods must be easy to execute (§ 7004(a))
The audit runs these checks against your live site and shows the evidence behind every result.
Get Your AuditThis page is for information only and is not legal advice. The excerpt is reproduced from official public sources and was checked against them on the last-reviewed date above. Laws change: check the authoritative source and consult a licensed attorney for compliance guidance.