The California Consumer Privacy Act (CCPA) does not explicitly require cookie consent in the same way laws like the EU's GDPR do. However, it does impose certain obligations that can affect how cookies are used, especially tracking or advertising cookies.
You must inform users what categories of personal information (including data collected via cookies) are being collected and for what purpose. This is usually done through a Privacy Policy.
If your site uses third-party cookies (e.g., for targeted advertising), and those cookies result in the “sale” of personal information (broadly defined under the CCPA), you must:
- Include a "Do Not Sell My Personal Information" link.
- Allow users to opt-out of that data sharing.
Cookies involved in cross-site tracking or behavioral advertising typically fall under this.