Opt-Out Confirmation: Means for the Consumer to Confirm Processing

What it requires

The companion duty to § 7025(c)(6), and likewise a "may" that the Register 2025, No. 39 amendments turned into a "must" effective January 1, 2026: a business must provide a means by which the consumer can confirm that their request to opt-out of sale/sharing has been processed. The same amendments replaced the example status text (the pre-2026 "Consumer Opted Out of Sale/Sharing" gave way to "Opt-Out Request Honored", the phrase § 7025(c)(6) also settled on) and joined the two example forms with "and" in place of "or", so the illustration now pairs the on-page message with the opt-out state shown in the consumer's privacy settings through a toggle or radio button. The duty covers every request to opt out, not only those sent as an opt-out preference signal, so a business that honors a footer-link opt-out silently now owes the consumer a receipt as well.

Regulation text

A business must provide a means by which the consumer can confirm that their request to opt-out of sale/sharing has been processed by the business. For example, the business may display on its website "Opt-Out Request Honored" in accordance with section 7025, subsection (b)(6), and display in the consumer's privacy settings through a toggle or radio button that the consumer has opted out of the sale/sharing of their personal information.

California Consumer Privacy Act / California Privacy Rights Act, § 7026(g)Read the full section from California Privacy Protection Agency (CalPrivacy)

How Privisy tests it