Hi,
The forum TOS doesn't allow for publication of emails. Sorry. So I'm publishing a link to the Google's official help page on this topic:
[support.google.com...]

Helping publishers comply with the California Consumer Privacy Act (CCPA)
Google has a long history of taking a user-first approach in everything we do. As a part of our commitment to users, we never sell personal information and we give users transparency and control over their ad experiences via My Account and several other features to help you manage your account. Per our Personalized advertising policy, we never use sensitive information to personalize ads. We also invest in initiatives such as the Coalition for Better Ads, the Google News Initiative, and ads.txt in order to support a healthy, sustainable ads ecosystem.

Google welcomes privacy laws that protect consumers. In May 2018, we launched several updates to help publishers comply with the General Data Protection Regulation (GDPR) in the EEA.

Today, we’re building on that feature set by offering restricted data processing, which will operate as set forth below, to help publishers manage their compliance with the California Consumer Privacy Act (CCPA).

About the California Consumer Privacy Act
The California Consumer Privacy Act (CCPA) is a new data privacy law that establishes various rights for California state residents. The law applies to companies that do business in California and meet one of several criteria related to revenue, data processing, and other factors. CCPA requires giving residents the right to opt out of the “sale” of their “personal information” (as the law defines those terms), with the opt-out offered via a prominent “Do Not Sell My Personal Information” link on the “selling” party’s homepage. CCPA does recognize certain exceptions to the definition of “sale,” such that not all transfers of personal information are “sales.” For example, transferring personal information to a “service provider” under the law is not a sale.

Service provider terms
Google already offers data protection terms pursuant to the General Data Protection Regulation (GDPR) in Europe. We are now also offering service provider terms under the CCPA, which will supplement those existing data protection terms (revised to reflect the CCPA), effective January 1, 2020. For customers on our online contracts and updated platform contracts, the service provider terms will be incorporated into our existing contracts via the data protection terms. For such customers, there is no action required on your part to add the service provider terms into your contract.

Restricted data processing for publishers
When a publisher enables restricted data processing, Google will limit how it uses data and begin serving non-personalized ads only. Non-personalized ads are not based on a user’s past behavior. They are targeted using contextual information, including coarse (such as city-level, but not ZIP/postal code) geo-targeting based on current location, and content on the current site or app or current query terms. Google disallows all interest-based audience targeting, including demographic targeting and user list targeting when in restricted data processing mode.

Restricted data processing options:

Publishers must decide for themselves when and how to enable restricted data processing mode, based on their own compliance obligations and legal analysis. Two common scenarios are below.

Some publishers may choose not to display a “Do Not Sell My Personal Information” link on their properties. Such publishers may choose to enable restricted data processing for all of their programmatic traffic for users in California via a network control. If they select this option, Google will use user IP addresses to determine the location of users and enable restricted data processing mode for any users we can detect have a California IP address.
Alternatively, other publishers may choose to display a “Do Not Sell My Personal Information” link. Such publishers may choose to send a restricted data processing signal on a per-request basis once a user has opted out of the sale of their personal information.
If you choose to enable restricted data processing either via the network control or through sending a restricted data processing signal on a per-request basis, those changes will fully take effect in serving by 11PM PT on December 12, 2019.

As local, state, and national entities get involved with the Internet look for more of the same. Things will get worse before they get better ... sadly, CA is pushing the envelope and ignoring Federal regulations (for reasons we don't discuss at WW)...

The webmaster who wants to do biz in CA will have to comply, or be above their regulations.... as in "not liable"...

For some that will defeat the purpose of having an on-line biz ... other than eschewing transactions in CA. (NOTE: CA is California's USA abbreviation, has nothing to do with neighbors above the 49th Parallel.)

Too bad that California chose to go the way of the communist-style European Union.

Hello-

The option is now available from the Adsense dashbaord.

I would like to know, if I choose the option "Enable restricted data processing", will I be fine, and avoid problems?

Thank you.

ps: I am not a native English speaker, and as a European, I worry not to understand all the details of it.

I think we are all hoping that we'll be fine by enabling the data restriction, and I think we will. It is similar to what Google provided us when the GDPR came along. I imagine a day is coming when we'll be restricting personalized ads for all sorts of states. I don't think it's a terrible thing if it takes us back to mainly contextual ads. I don't know, though, what California thinks it can do to a site that is not based in California and still shows personalized ads to Californians.

To be be fair - when GDPR came out - it was that complicated to show personalised ads (with setting cookies, and user options) - I just turned them off to members of the EU.

My revenue hardly changed at all.

In one Adsense webinar - a google rep even said it hadn’t been as big an impact on users revenue as they thought it would.

I suspect this really won’t make much difference to earnings, and it will just mean showing an “agree to ads” pop up that appeasers both the EU and CA (and eventually - everyone)

... and it will just mean showing an “agree to ads” pop up that appeasers both the EU and CA ...

If I don't "agree to ads", I just turn my adblocker on.

My properties all target the United States ... California is in the United States and until the United States Federal Government comes along and goes all bazooka over this stuff like they did across the pond, things here will just bandy about as they always have.

The only info I collect client side is for support or billing. As far as all of the geo-ip stuff? ... Well, Google provides search results based on your location and "surfing habits", so why doesn't Google just restrict the ads by default for California? Save us all the trouble.

Is it really our job to help dig big tech out of the hole it's dug for itself? Revenue aside, I think it's more the whole principle of the thing that chaps my hide more than anything else --- The audacity of Google thinking that we are all a part of "It's" problem somehow just seems to suck all the air out of the room.

So hypothetically we just turn off all of this targeting that Google does in California -- 6 months down the road the people in California might actually begin to see some improvement in the SERP's as they start finding what they are actually looking for ... Google competitors might actually start popping up with "Page One Results" again, just like back in the old days.

As far as pop-ups and modals? Totally out of the question on my properties. I won't write any object.onload like that. I've got privacy policies, DMCA's, and T.O.S.'s for days, and if people are too stupid to read those, then I don't know what to tell them.

Hello-

In EU, with the GDPR, the publisher is liable as much as Google (or others).

in my opinion, you simply comply with Google The California Consumer Privacy Act (CCPA) rules, just add the new regulatory url to your site's privacy page [policies.google.com...]
[privacy.google.com...]

@Azlinda

Too bad that California chose to go the way of the communist-style European Union

Then you would hate my Australia with our wonderful Medicare and all the other socialist benefits we enjoy - ditto for almost all of the other advanced democracies/economies around the world save for the United States of America.

Sad.

American cowboy is right. If your hospital treats people for free, or if you deny children the right to shoot each other, your country is communist

I know. The U.S. is just awful. That must be why everyone wants to move here.

everyone wants to move here.

Really?

From Brookvale NSW AU to Lethbridge AB CA to Seattle WA USA and then on to Great Falls MT USA -- I'll ask all of you this

What's not to love?

bl00dy mindful of all of the great times with all of the great people I've met over the years ..

So far I haven't heard of any webmasters getting so much as a warning for ignoring GDPR in the EU. I did implement some half-hearted pop ups as I thought if my users weren't sufficiently annoyed they might not think my sites were bona-fide!

This time I'm sat across the pond so will happily wait and see how this plays out before I do anything. I'm guessing someone else will be first in line if anything does come of it enforcement-wise...