Comply with CCPA Do Not Sell or Share My Personal Information

Consent management platforms control cookies, tags, and pixels in anonymous, browser-based contexts, while rights systems manage requests tied to known identities like email addresses. In most organizations the two never share identity or enforcement logic. The result is a consumer who has to take three separate actions to opt out, and an opt-out that stops browser tracking while backend data use continues, or flags backend records while pixels keep firing. Recent settlements treat each of these gaps as a violation, not a technical nuance.

Opt-Out Sync, built on the Ketch Identity Sync framework, connects your form, CMP, identity resolution, and downstream enforcement into one workflow. It captures a Do Not Sell or Share choice once, through a banner or a webform, and enforces it everywhere personal data is used: across devices, channels, browsers, backend systems, and downstream partners.

A banner alone doesn't record an email address, so it can't reach offline data or downstream systems. A form alone, without connecting back to the CMP, leaves tags firing after the consumer opts out. The CCPA requires opt-outs cover both online and offline data. That means you need both, and they need to work as one. With Opt-Out Sync, a single consumer action triggers the form, updates the CMP, and reaches downstream systems simultaneously.

Automatically linked consent signals mean an opt-out expressed through the banner is recognized by backend workflows, and an opt-out submitted through the webform is reflected in consent enforcement on the site, with no manual reconciliation and no ambiguity about which signal wins.

A single opt-out process governs enforcement for anonymous and authenticated consumers, so logic never diverges based on how someone interacts with your business. When Ketch already holds a reliable identifier, adaptive experiences skip redundant requests like email addresses. When the consumer is unknown, the opt-out still goes through without extra data collection. Identity signals recognize the consumer across logged-in and logged-out states, browsers, and devices.

Once captured, the opt-out propagates across browser configurations, backend systems, and downstream partners, including CRM platforms, CDPs, advertising systems, identity resolution providers, and DSPs. Every enforcement action is logged with an identity-based audit trail, so you can show when the choice was made, which systems received it, and what changed as a result.