CCPA/CPRA § 7025(f)(3)
GPC: No Notifications or Interstitials in Frictionless Mode
The Privisy audit tests this section. See the checks
- Source
- Regulation
- In force from
- January 1, 2026
- Last reviewed
- September 2026
- Framework
- CCPA/CPRA
What it requires
Under the frictionless processing path, a business is prohibited from displaying any notification, pop-up, text, graphic, animation, sound, video, or interstitial content in response to an opt-out preference signal. Two exceptions apply: the business may show opt-out status (e.g., "you are opted out"), and may provide a link to a privacy settings page, menu, or similar interface through which the consumer can consent to the business ignoring the signal, provided the link itself complies with (f)(1)-(3). Both exceptions have been in force since the March 29, 2023 text; the Register 2025, No. 39 package substantively amended (c)(3), (c)(4) and (c)(6) and amended (f)(3) only typographically, resetting "(f)(1) through (3)" as "(f)(1)-(3)".
Regulation text
Except as allowed by these regulations, processing an opt-out preference signal in a frictionless manner as required by Civil Code section 1798.135, subdivision (b)(1), means that the business shall not: [...] (3) Display a notification, pop-up, text, graphic, animation, sound, video, or any interstitial content in response to the opt-out preference signal. However, a business's display of whether the consumer visiting their website has opted out of the sale or sharing their personal information shall not be considered a violation of this regulation. The business may also provide a link to a privacy settings page, menu, or similar interface that enables the consumer to consent to the business ignoring the opt-out preference signal with respect to the business's sale or sharing of the consumer's personal information provided that it complies with subsections (f)(1)-(3).
California Consumer Privacy Act / California Privacy Rights Act, § 7025(f)(3)Read the full section from California Privacy Protection Agency (CalPrivacy)
How Privisy tests it
- GPC Consent Override (§ 7025(f)(3))
Any dialog in response to the signal forfeits frictionless processing
The audit runs this check against your live site and shows the evidence behind every result.
Get Your AuditThis page is for information only and is not legal advice. The excerpt is reproduced from official public sources and was checked against them on the last-reviewed date above. Laws change: check the authoritative source and consult a licensed attorney for compliance guidance.