As new privacy laws emerge across the US, businesses must navigate the growing challenge of providing consumers with the right to opt out of personal data processing. With 20 US state privacy laws already in place, having opt-out options that are clear and accessible is crucial. If consumers can't easily find where to opt-out on your website, your business risks non-compliance.
In this article, we'll break down the basics of naming your opt-out link in order to align with US privacy regulations.
Why Does the Opt-Out Name Matter?
The name of your opt-out link matters because across the various consumer privacy laws in the United States, the idea is the same: the link has to be clear and easy to understand for your customers. A well-named link helps people understand their rights and gives them control over their personal information.
What Happens if My Opt-Out Link is Not Named Correctly?
If your opt-out link isn’t named correctly, your business may be non-compliant with state laws, like those in California and Colorado. Non-compliance can lead to legal penalties, decreased consumer trust, regulatory scrutiny, negative publicity, and potential loss of customers.
What to Name Your Opt-Out Link
California: Consumer Privacy Rights Act (CPRA)
Under the CPRA, businesses that sell or share consumers' personal information must provide clear and accessible options for consumers to opt out. This means your business has to meet the following requirements:
- Opt-Out Link: A link titled "Do Not Sell or Share My Personal Information" must be prominently placed on all pages of your website such as, for example, in the website footer. This link should direct consumers to a form where they can opt-out of the sale or sharing of their personal information.
- Sensitive Information Link: Another link titled "Limit the Use of My Sensitive Personal Information" should be made available to your consumers. This link allows consumers to restrict the use or disclosure of their sensitive personal information.
- Single Privacy Link: Alternatively, your business can use a single link, such as "Privacy Options," "Privacy Choices," or "Privacy Opt-Out Rights," which combines the functions of the two links above. This single privacy link should be easily identifiable and allow consumers to opt out of both the sharing of their personal information and the use of their sensitive personal information.
Regardless of the option you choose, these links should blend seamlessly with your website's overall design and must not have a negative effect on users’ experience. The California Attorney General has provided an opt-out best practices guide, available on their website, which includes a uniform opt-out icon that businesses are encouraged to use.
Colorado: Data Privacy Act
Colorado's Data Privacy Act mandates that controllers (businesses that decide how personal data is collected and used) provide clear opt-out methods for consumers regarding targeted advertising and the sale of personal data. If you are located in Colorado or target Colorado residents, you have to know the following:
- Opt-Out Method: You have to provide a conspicuous method for consumers to exercise their right to opt out. This could be a link or any other clear method.
- Link Requirements: If you use a link, this link should take consumers directly to the opt-out method. The link text should clearly indicate its purpose, using phrases like "Colorado Opt-Out Rights," "Personal Data Use Opt-Out," or "Your Privacy Choices."
The opt-out method should be easily accessible and clearly stated in the privacy notice that must be provided to consumers.
Other States
While states like California and Colorado have specific requirements for opt-out mechanisms, other states, such as Connecticut, Oregon, Utah or Virginia, emphasize certain conditions that need to be met to ensure consumer privacy:
- Opt-Out Link: if you process information for purposes of direct marketing or advertisement, you are required to have a clear and conspicuous link on your website that directs consumers or their agents to an internet page where they can opt out of targeted advertising or the sale of personal data.
- User-Friendly and Consistent: The opt-out method you use must be user-friendly and easy for the average consumer to use. It should also be consistent with similar platforms, technologies, or mechanisms other federal or state laws require.
In short, your goal should be to make it as clear as possible for customers what they're opting out of. To that end:
- Be clear and concise: Customers should understand what they're doing when they click the link. Here are some options:
- Direct and Clear: Do Not Sell My Personal Information; Opt Out of Data Sale; Stop Selling My Data
- Privacy Focused: Control My Data; Privacy Choices; Your Privacy Options
- Combined Options:
- If you handle sensitive data, you might need a separate link for that. You could use: Limit the Use of My Sensitive Data
- Or, you can combine both options into one link, like: Privacy Options or Data Privacy Controls
- Make it easy to find: The link should be prominently displayed on your website.
- Follow state laws: Different states have specific requirements, so make sure you know the compliance requirements of privacy laws in the states where you do business.
How can Clym help?
Clym believes in striking a balance between digital compliance and your business needs, which is why we offer businesses the following:
- All-in-one platform: One interface combining Privacy and Accessibility compliance with global regulations, at an affordable price;
- Seamless integration into your website;
- Adaptability to your users’ location and applicable regulation;
- Customizable branding;
- ReadyCompliance™: Covering 50+ data privacy regulations;
- Six preconfigured accessibility profiles, as well as 25+ display adjustments that allow visitors to customise their individual experience.
You can convince yourself and see Clym in action by booking a demo or reaching out to us to discuss your specific needs today.