An incentivised opt-in needs a financial-incentive notice that agrees with the SMS clause
The requirementstatement
Where joining the programme earns a discount or other reward, the policy must carry a CCPA Notice of Financial Incentive that does not contradict the messaging clause.
- Severityseverity
- MediumMEDIUMUsually survives review, but lowers your trust score or invites a manual look you would rather avoid.
- When it bitesphase
- Gates approvalapprovalGet this wrong and the brand or campaign is refused at registration.
- What is checkedobject
- privacy policy body + opt-in offer text
- Where it liveslayer
- Policy pagesPOLICY_PAGE
- How Ekas settles itdetectability
- AI · crawlCRAWL
- Needs your live site or policy page fetched and read. Ekas crawls it the way a reviewer would.
- What the fix involvesfailureClass
- Fix the policyTERMINAL_POLICY
- The fix lives in your privacy policy or SMS terms. Ekas can generate the missing clauses.
- Who requires itauthorities
- CCPA
- When it appliesapplicabilityText
- Applies to every 10DLC registration.
Why this rule existsrationale
Offering ten per cent off for a phone number is a financial incentive under California law and needs its own notice, and the notice has to explain the value of the data — which is exactly the sentence that can undo a non-sharing promise if it is drafted carelessly. The offer is usually designed by marketing and the policy by someone else, so the two are rarely read together.
How to fix itremediation
Add the notice — what the incentive is, what data it relates to, how to withdraw, and a good-faith estimate of value — and state that messaging opt-in data is still never shared. Done when the two sections agree.
Common mistakespitfalls
- The value estimate is the sentence that can contradict the non-sharing clause. Base it on the value of the customer relationship rather than on what the data would fetch if sold.
Notesnotes
Conditional on the opt-in offering an incentive, which no applicability dimension expresses; the criteria pass immediately where none is offered. The terms-side twin is POL-234.
Rules you will hit next
Other policy pages rules at the same severity. A registration is judged as a whole, not rule by rule.
POL-020A non-English site needs an English policyMediumMEDIUMPOL-027The policy URLs must stay live after approvalMediumMEDIUMPOL-028Keep a dated copy of both documents as submittedMediumMEDIUMPOL-058A service-provider carve-back is required, not prohibitedMediumMEDIUMPOL-076The privacy policy must describe data handling, not sell the programmeMediumMEDIUMPOL-104The policy must say how message content is handledMediumMEDIUM
POL-111 is one of 157 policy pages rules in the 915-rule 10DLC registry. Free to cite under CC BY 4.0.