'Do not sell’ refers to a California Consumer Privacy Act (CCPA) provision stating that consumers have the right—one organizations must honor—to tell a business not to sell their data for the purpose of targeted advertising.
In short, if a business collects and sells personal information they must notify the consumer and provide an easy-to-find “Do not sell my personal information” link somewhere on their website.
‘Do not share’ is a provision in the California Privacy Rights Act (CPRA), which amended the CCPA, that expands what types of data transfer are regulated by California’s privacy laws.
The CPRA defines sharing as:
“sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration”
Put simply, if an organization discloses your personal data by any means to another organization, that counts as sharing–whether or not money was exchanged.