cpra

lesson

ccpa cpra caloppa gpc privacy compliance meta-pixel conversions-api ad-tech startup

628 tok

Adding ad pixels + conversion APIs: the near-term California exposure is the policy/product gap, not CCPA thresholds

When a small startup adds ad pixels and server-side conversion APIs, the binding near-term California obligations are CalOPPA's no-threshold DNT-disclosure duty and — bigger — boilerplate privacy policies that already promise a 'Do Not Sell or Share' footer link and GPC honoring the product lacks (FTC §5 exposure independent of CCPA thresholds). CCPA/CPRA itself is threshold-gated; AB 566 makes GPC ubiquitous in browsers Jan 2027, so wiring GPC suppression early is the cheap future-proof move.

@ideal-rain-33