Questions & Answers

What is a Data Broker according to the CCPA?

Another California law, Civil Code section 1798.99.80, defines a data broker as “a business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship.” This law exempts certain businesses that are regulated...

What is a Notice at Collection according to the CCPA?

The CCPA requires businesses to give consumers certain information in a “notice at collection.” A notice at collection must list the categories of personal information businesses collect about consumers and the purposes for which they use the categories of information. (To find out how you can...

What is a Privacy Policy according the CCPA?

A business’s privacy policy is a written statement that gives a broad picture of its online and offline practices for the collection, use, sharing, and sale of consumers’ personal information. The CCPA requires business privacy policies to include information on consumers’ privacy rights and how to...

What is Biometric Information in the California Consumer Privacy Act (“CCPA”)?

“Biometric information” means an individual’s physiological, biological or behavioral characteristics, including an individual’s deoxyribonucleic acid (DNA), that can be used, singly or in combination with each other or with other identifying data, to establish individual identity. Biometric...

What is considered Personal Information according to the CCPA?

Personal information is information that identifies, relates to, or could reasonably be linked with you or your household. For example, it could include your name, social security number, email address, records of products purchased, internet browsing history, geolocation data, fingerprints, and...

What is Deidentified Information in the California Consumer Privacy Act (“CCPA”)?

“Deidentified” means information that cannot reasonably identify, relate to, describe, be capable of being associated with, or be linked, directly or indirectly, to a particular consumer, provided that a business that uses deidentified information: (1) Has implemented technical safeguards that...

What is Personal Information in the California Consumer Privacy Act (“CCPA”)?

“Personal information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes, but is not limited to, the following: (A) Identifiers...

What is the difference between the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”)?

CCPA stands for the California Consumer Privacy Act and CPRA stands for the California Privacy Rights Act. The CCPA was passed by the California legislature in 2018 and came into effect on January 1, 2020. The CPRA was a ballot measure approved by California voters in November 2020 and came into...

What is the Right to Know according to the CCPA?

You may request that businesses disclose to you what personal information they have collected, used, shared, or sold about you, and why they collected, used, shared, or sold that information. Specifically, you may request that businesses disclose: The categories of personal information collected...

What is the Right to Opt-out according to the CCPA?

You may request that businesses stop selling your personal information (“opt-out”). With some exceptions, businesses cannot sell your personal information after they receive your opt-out request unless you later provide authorization allowing them to do so again. Businesses must wait at least 12...

Search form

Search form

Search form

Sign Up For Our Newsletter