The California Privacy Rights Act states that if a company shares personal information with a third party, the company must provide the consumer with the ability to opt-out of the sharing. If an activity does not constitute sharing, then the CPRA’s requirement doesn't apply.