The following is sufficient consent for the Video Privacy Protection Act and the California Invasion of Privacy Act, according to a recent decision in the U.S. District Court for the Northern District of California.
Cookie banner + checkbox with hyperlink to privacy notice at account creation + checkbox with hyperlink to privacy notice at each purchase + privacy notice that details data sharing with third parties via trackers.
The privacy notice in this case included the ability to:
- refuse cookies or request their deletion.
- obtain the list of partners who are permitted to store and/or access these cookies.
- adjust your browser settings to understand when cookies are stored on your device or to disable the cookies.
- object and withdraw consent to the sharing of data.
[View source.]