Consumers exercising rights receive equal service and pricing

CCPA § 1798.125 prohibits penalizing consumers for exercising their privacy rights — denying them features, charging higher prices, or degrading service quality because they opted out of data sharing. Feature flags keyed on a ccpa_opt_out field are the most common code-level violation: they were probably added to "personalize" something, but any degradation in service for opted-out users is discriminatory under the statute. Financial incentive programs — loyalty points or discounts in exchange for data — are permitted under § 1798.125(b) but require explicit disclosure of the data's estimated monetary value and a separate affirmative opt-in, which virtually no AI-built implementation includes.

Audit every feature flag, pricing condition, and tier check for references to opt-out or privacy preference fields. Remove any coupling between service level and CCPA opt-out status.

// WRONG — gates premium features on data-sharing consent
function canAccessPremiumFeatures(user: User): boolean {
  return user.plan === 'premium' && !user.ccpaOptOut // violates § 1798.125
}

// CORRECT — subscription status only
function canAccessPremiumFeatures(user: User): boolean {
  return user.plan === 'premium'
}

If you operate a loyalty or referral program that offers benefits in exchange for data sharing, add a Financial Incentive Programs section to your privacy policy disclosing the estimated monetary value of consumer data and implement an explicit opt-in checkbox — not enrollment on signup. See src/app/privacy/page.tsx.