Components of the Framework

The IAB CCPA Compliance Framework creates a contractual relationship between digital properties and the downstream framework participants to enforce limitations on the use of data and mechanisms for accountability when a consumer opts-out of the sale of their information. Components under the IAB CCPA Compliance Framework include:

Consent Management Platform


The USP String allows communication between publishers, advertisers and downstream participants such as adtech vendors, agencies, SSPs, DSPs, etc. 

Preference Center

Limited Service Provider Agreement

Participants of the framework must sign the Limited Service Agreement (LSPA) that binds supply chain partners to behaviors to meet the law’s provisions

OTT compliance

CCPA Data Deletion Spec

The technical spec allows publishers to signal that a user exercised their right to deletion and for a service provider to listen for requests.  


Complete Solution for CCPA Compliance

ccpa compliance solution

Enable Opt-Out of Sale Requests

Personal information under the CCPA is broadly defined and includes internet or other electronic network activity information, unique identifiers (which include cookies), and information regarding a consumer’s interaction with a website, application, or advertisement. Via OneTrust PreferenceChoice, build a customized CMP that reflects CCPA-specific messaging. Using geolocation functionality, display different banners with different consent models depending on the website visitor’s location and can be customized to include a “Do Not Sell My Personal Information” link.

Request a Demo

OneTrust PreferenceChoice enables publishers and advertisers to collect, manage and signal consent and preferences across systems and ecosystems. With our toolset built to operationalize trust, we help publishers and advertisers balance user experience, transparency, personalization and first-party data collection with privacy, security, and compliance across 100s of global privacy regulations. With PreferenceChoice, publishers and advertisers can drive engaging user experiences, build trust across audiences, and automate compliance.

Learn More Request Demo With a Publisher Expert

If we do this right in California, the state will put the capital P back into privacy for all Americans.

California Attorney General Xavier Becerra



CCPA for Publishers: Legal Implications, IAB CCPA Framework and CMP Best Practices

+ Watch Now

Blog Post

IAB CCPA Data Deletion Spec Released

+ Read Now

Request Demo

Schedule time with a 1:1 expert

+ Request Demo
Onetrust All Rights Reserved