What is do not sell or share?
Do Not Sell or Share is a consumer right under US state privacy laws (notably California's CCPA/CPRA) to direct a business to stop selling or sharing their personal information — a request that, once made, must be honoured by suppressing the individual across all channels.
Do Not Sell or Share gives individuals direct control over the commercial movement of their data. Under California's CCPA/CPRA and similar laws in other US states, a person can tell a business to stop selling or sharing their personal information, and the business must comply. For a data product, complying means suppression: the individual is removed from everything that's served.
The right is broader than the word "sell" suggests. "Sharing" captures disclosures for cross-context advertising even when no money changes hands, and "selling" is defined expansively. The safe reading is that any commercial disclosure of an individual's personal information is in scope, which is why an honest data provider offers a clear, self-serve way to make the request.
Global privacy signals make this scalable. The Global Privacy Control (GPC) lets a person broadcast a Do-Not-Sell preference from their browser, and compliant businesses treat that signal as a valid request without requiring a separate form. Honouring GPC is both good practice and, in some jurisdictions, legally expected.
Operationally, a Do-Not-Sell request resolves to the same place every opt-out does: the suppression list. Once a request is made — through a form, an authorised agent, or a privacy signal — the individual is suppressed across search, exports, enrichment, and the API, permanently and across segments. That's the only way the right means anything.
Frequently asked questions
What does Do Not Sell or Share cover?
The right to direct a business to stop selling or sharing your personal information under US state privacy laws like CCPA/CPRA. "Sharing" includes disclosures for cross-context advertising, so the right is broader than literal sales.
Do you honour the Global Privacy Control?
Yes. A Global Privacy Control signal is treated as a valid Do-Not-Sell request, and the individual is suppressed across all channels — search, exports, enrichment, and API — without requiring a separate form.