CCPA/CPRA § 7025(f)(3)

GPC: No Notifications or Interstitials in Frictionless Mode

The Privisy audit tests this section. See the checks

Source
Regulation
In force from
January 1, 2026
Last reviewed
September 2026
Framework
CCPA/CPRA

What it requires

Under the frictionless processing path, a business is prohibited from displaying any notification, pop-up, text, graphic, animation, sound, video, or interstitial content in response to an opt-out preference signal. Two exceptions apply: the business may show opt-out status (e.g., "you are opted out"), and may provide a link to a privacy settings page, menu, or similar interface through which the consumer can consent to the business ignoring the signal, provided the link itself complies with (f)(1)-(3). Both exceptions have been in force since the March 29, 2023 text; the Register 2025, No. 39 package substantively amended (c)(3), (c)(4) and (c)(6) and amended (f)(3) only typographically, resetting "(f)(1) through (3)" as "(f)(1)-(3)".

Regulation text

Except as allowed by these regulations, processing an opt-out preference signal in a frictionless manner as required by Civil Code section 1798.135, subdivision (b)(1), means that the business shall not: [...] (3) Display a notification, pop-up, text, graphic, animation, sound, video, or any interstitial content in response to the opt-out preference signal. However, a business's display of whether the consumer visiting their website has opted out of the sale or sharing their personal information shall not be considered a violation of this regulation. The business may also provide a link to a privacy settings page, menu, or similar interface that enables the consumer to consent to the business ignoring the opt-out preference signal with respect to the business's sale or sharing of the consumer's personal information provided that it complies with subsections (f)(1)-(3).

California Consumer Privacy Act / California Privacy Rights Act, § 7025(f)(3)Read the full section from California Privacy Protection Agency (CalPrivacy)

How Privisy tests it

  • GPC Consent Override (§ 7025(f)(3))

    Any dialog in response to the signal forfeits frictionless processing

The audit runs this check against your live site and shows the evidence behind every result.

Get Your Audit

This page is for information only and is not legal advice. The excerpt is reproduced from official public sources and was checked against them on the last-reviewed date above. Laws change: check the authoritative source and consult a licensed attorney for compliance guidance.

See what your site actually does under these rules.

The Privisy audit runs 56 checks on your live site and cites the section behind every finding.

Get Your Audit