What do I need to do for GDPR, CCPA?

We recommend that all publishers disclose their use of Skimlinks and link to Skimlinks' privacy policy somewhere in their website (their terms of service, legal or privacy policy section is probably a good place).  Below is some more info regarding Skimlinks and CCPA:

Audits - Skimlinks is audited and certified by EDAA and US DAA. We are also a member of IAB Consent Framework both as a CMP and as a vendor.

Consent - Skimlinks relies on publishers to get consent from the user for specific purposes and we will audit randomly selected publishers to make sure the Skimlinks JS is only triggered with valid consent. Consent was only required for European Economic Area (EEA) countries, but starting from January 2020, we will require consent for California State too. In addition to relying on publisher consent, for selected publishers, Skimlinks has our own interstitial on-click consent pop-up to get consent from the user. Again, this pop-up was shown only for EEA traffic but starting from January 2020, we will enable this for California traffic too.

Data Processing - Skimlinks collects Personal Information (WEB Cookie and IP addresses) relying on consent legal basis. Skimlinks expects all our publishers to get consent from the users before placing Cookies including Skimlinks Cookie.

Data Subject Rights - Skimlinks has already enabled data subject rights execution through optout.skimlinks.com globally rather limiting it to EEA countries. Thus, this is ready for CCPA.

Policies - Skimlinks has a Data Security Breach Policy, Privacy by Design Policy, Information Security Policy, Data Retention Policy, Data Subject Rights Policy ready and compliant with CCPA. Skimlinks is assessing our Privacy Policy to make sure it is ready for CCPA. Skimlinks might need to make a few minor changes which will not affect any of the points mentioned above.

Security - Skimlinks has put into place necessary security measures to protect end user data. In addition to in-house continuous security controls, Skimlinks also have a security expert partner running security checks on our platform periodically.

Transparency - Skimlinks wants to make sure we explain data processing activities in an easy, layered approach. In the first layer we have the consent text, next layer is our About Data page, and the third layer is our Privacy Policy.