Adobe Advertising Support for the California Consumer Privacy Act: Consumer Opt-Out of Sale Support

For Adobe Advertising Demand Side Platform (DSP)

The California Consumer Privacy Act (CCPA) is California’s new privacy law, which is effective January 1, 2020. CCPA provides California residents new rights regarding their personal information and imposes data protection responsibilities on certain entities who conduct business in California. CCPA provides consumers with the right to access and delete their data as well as the right to opt out of certain activities that qualify as “selling” personal information to a third party.

As a business, you will determine the personal data that Adobe Experience Cloud processes and stores on your behalf.

As your service provider, Adobe Advertising provides support for your business to fulfill its obligations under CCPA that are applicable to the use of Adobe Advertising products and services, including managing consumer requests to access and delete personal information and managing consumer requests to opt out of the sale of personal information.

This document describes how Adobe Advertising Demand Side Platform (DSP), as a service provider, supports the consumer right to opt out of the “sale” of “personal information,” as each term is defined by the CCPA. It includes information on how to communicate opt-out-of-sale requests to Adobe Advertising and how to retrieve reports of your organization’s opt-out-of-sale requests.

For information about how Advertising Search, Social, & Commerce; Advertising Creative; and Advertising DCO support consumers’ personal information access and deletion rights, see Adobe Advertising Support for the California Consumer Privacy Act: Consumer Data Access and Delete Support.

For more information about the Adobe Privacy services for CCPA, see the Adobe Privacy Center.

Communicating Consumer Opt-Out-of-Sale Requests to Adobe Advertising

You can communicate consumer opt-out-of-sale requests by using either:

Method 1: Communicate CCPA Opt-Out-of-Sale Requests Using a CCPA Opt-Out-of-Sale Segment in Advertising DSP

Method 2: Communicate CCPA Opt-Out-of-Sale Requests Using the Adobe Experience Platform Privacy Service API

Advertisers assigned an Adobe Experience Cloud organization ID only

All of these steps are necessary to receive support from Adobe Advertising. For more information about these and other related tasks you need to perform using the Adobe Experience Platform Privacy Service, and where to find the items you’ll need, see https://experienceleague.adobe.com/docs/experience-platform/privacy/home.html.

Retrieving Reports of Consumers Who Submitted Opt-Out-of-Sale Requests

Adobe Advertising generates monthly reports of IDs that customers have submitted for opt-out-of-sale requests for the account. Each report is available as a tab-separated text file compressed into GZIP format. The data consolidates requests captured using CCPA opt-out-of-sale segments that were created in Advertising DSP and any submissions made via the Privacy Service API. User IDs captured in CCPA opt-out-of-sale segments are identified by segment and by advertiser. Reports are generated on the first of each month for the previous month. For example, the monthly user list for June is available on July 1.

You can retrieve links to the monthly reports that were created in the previous three months, either from within Advertising DSP or by using the Advertising DSP Trafficking API. Each link is valid for seven days but refreshes each time a customer attempts to retrieve one.

Method 1: Retrieve Consumer Opt-Out-of-Sale Reports Within Advertising DSP

Method 2: Retrieve Consumer Opt-Out-of-Sale Reports Using the Advertising DSP Trafficking API

This feature is available to organizations that use the Trafficking API. See the documentation for the Trafficking API for more information.

If your organization doesn’t use the Trafficking API but is interested in more information, contact your Adobe Account Team.

Appendix: Example CCPA Opt-Out-of-Sale Request for Privacy Service API Users

curl -X POST \
  https://platform.adobe.io/data/privacy/gdpr/ \
  -H 'Authorization: Bearer {ACCESS_TOKEN}' \
  -H 'Content-Type: application/json' \
  -H 'x-api-key: {API_KEY}' \
  -H 'x-gw-ims-org-id: {IMS_ORG}' \
  -d '{
    "companyContexts": [
      {
        "namespace": "imsOrgID",
        "value": "{IMS_ORG}"
      }
    ],
    "users": [
      {
        "key": "DavidSmith",
        "action": ["opt-out-of-sale"],
        "userIDs": [
          {
            "namespace": "email",
            "value": "dsmith@acme.com",
            "type": "standard"
          },
          {
            "namespace": "AdCloud",
            "type": "standard",
            "value":  "Wqersioejr-wdg",
          }
    ],
    "include": ["AdCloud"],
    "regulation": "ccpa"
}'

where: