AddApptr’s view on CCPA

The Californian Consumer Privacy Act (CCPA) came into effect on January 1, 2020. The regulation will be enforced beginning in June 2020.

In short, CCPA gives the app user the right to say “no” to the sale of personal data. To enforce this right, the app must provide means for users to opt-out.

AddApptr is a company located in Hamburg, Germany. As such, AddApptr has to comply with European legislation. GDPR is the key regulation to follow when it comes to processing personal data. The Californian regulation (CCPA) is just an additional regulation for AddApptr and its customers (publishers).

The concept of CCPA follows an opt-out approach, whereas GDPR is seeking an opt-in approach with the option to opt-out at any time. Correctly implemented, fully compliant GDPR consent management also contains the opt-out option required by CCPA. Contrary to the above, a CCPA-compliant solution does not automatically fulfill the requirements of GDPR, because opt-in is generally not required under CCPA.

Many ad networks are now starting to provide solutions to comply with CCPA. There are a variety of solutions available at the moment. Some of them refer to the settings of the operating systems, others provide specific APIs. IAB (USA) also provides a framework relatively similar to the IAB (Europe) Transparency & Consent Framework (TCF).

Google in particular offers two ways to comply with CCPA:

• server-side settings in AdManager and AdMob to “restrict data processing,” which means a publisher-side general opt-out
• SDK-APIs to restrict data processing per ad request

What AddApptr does regarding CCPA

As mentioned above, AddApptr as a European company must always comply with the requirements of GDPR. Since a fully compliant GDPR consent management also contains the opt-out option required by CCPA, AddApptr will use the available CCPA APIs of third-party SDKs accordingly. For the time being, AddApptr is not planning to apply for the status as a vendor under the IAB-CCPA framework.

What publishers should do regarding CCPA

As laid out above, AddApptr relies on GDPR also in following the rules under CCPA. Hence, publishers should follow our guidelines for actions under GDPR.

Related Topics

GDPR