CCPA Ready · WooCommerce
CCPA/CPRA (California) plus 10+ newer state laws require a privacy notice, a "Do Not Sell or Share" link, honoring opt-out signals, and consumer data rights. Check yours.
WooCommerce is self-hosted, so almost nothing is handled for you — you own the stack, the data, and therefore the compliance. That's more control and more responsibility than a hosted marketplace.
📦 On WooCommerce: Self-hosting means US privacy, marketing and auto-renewal rules apply to you directly, and the configuration (consent, disclosures, cancel flow) is entirely yours.
This rule applies to WooCommerce sellers who sell to or collect data from consumers in California or other US states. Sell to US consumers? California + new state laws require a privacy notice, opt-out, and a 'Do Not Sell' link. Not sure? The free checker tells you in about a minute — no signup.
Whatever the platform handles, you still need to be able to answer "yes" to each of these — these are the points WooCommerce sellers most often get caught on:
⚠️ Exposure: $2,500/violation — $7,500 if intentional or a minor · Status: In force. On WooCommerce, that's on top of any account suspension for breaking platform policy.
Compare the penalty for every rule →
WooCommerce gives you the storefront, but uS state privacy (CCPA/CPRA) compliance is the seller's responsibility — the platform doesn't do it for you. The free checker shows exactly where you stand in about a minute.
California's CCPA/CPRA applies above certain thresholds (revenue, data volume, or selling data), and 10+ other states have similar laws. If you sell to US consumers and collect personal data or use targeted ads, you likely need a notice and opt-out.
A clear, account-free link (often "Your Privacy Choices") letting consumers opt out of the sale or sharing of their personal information — including cross-context behavioural advertising cookies.
Global Privacy Control is a browser opt-out signal. Under CPRA and several state laws you must treat it as a valid opt-out of sale/sharing.
RuleGoose checks this against the California CCPA/CPRA + US state privacy laws. Read it yourself: California AG — CCPA →
or get one RuleGoose Score across every rule your WooCommerce store has to meet.
US state privacy (CCPA/CPRA) is one of several rules a WooCommerce store has to meet. See the full WooCommerce compliance checklist →, or read the platform-neutral US state privacy (CCPA/CPRA) guide.
Informational only, not legal advice, and not affiliated with California or the FTC or WooCommerce. Last reviewed 2026-06-30.