Opt-out friction via email verification
Second connected-vehicle opt-out enforcement action, following the Honda action. Ford required consumers to complete an email verification step before processing opt-out requests for sale and sharing of personal information collected through its digital properties and connected vehicle services. CPPA found the mandatory verification step constituted unnecessary friction under CCPA.
Ford must provide easy opt-out methods with minimal steps, audit tracking technologies on its website, and honor opt-out preference signals including the Global Privacy Control. Ford retroactively processed the previously blocked opt-out requests after the agency’s investigation commenced.