CALIFORNIA CONSUMER PROTECTION ACT (CCPA)

Objective : Gives individuals more control over the personal information that businesses collect about them and the CCPA regulations provide guidance on how to implement the law. This landmark law secures new privacy rights for California consumers, including:

• The right to know about the personal information a business collects from them and how it is used and shared.
• The right to delete personal information collected from them (with some exceptions).
• The right to opt-out of the sale of their personal information.
• The right to non-discrimination for exercising their CCPA rights.

Rights under the CCPA:

The CCPA is only applicable to a Californian resident.

• A Californian resident may ask businesses to disclose what personal information including but not limited to name, social security number, email address, records of products purchased, internet browsing history, geolocation data, fingerprints, and inferences from other personal information that could create a profile about your preferences and characteristics. they have about them and what they do with that information.
• They have the right to ask the businesses to delete the personal information they possess and not to sell the personal information.
• A resident also has the right to be notified, before or at the point businesses collect their personal information, of the types of personal information they are collecting and what they may do with that information.

Applicability:

The CCPA applies to for-profit businesses that do business in California and meet any of the following:

• Have a gross annual revenue of over $25 million.
• Buy, receive, or sell the personal information of 50,000 or more California residents, households or devices.
• Derive 50% or more of their annual revenue from selling California residents’ personal information.

Violation:

A Californian resident cannot sue businesses for most CCPA violations. One can only sue a business under the CCPA if there is a data breach, and even then, only under limited circumstances. One can sue a business if your nonencrypted and nonredacted personal information was stolen in a data breach as a result of the business’s failure to maintain reasonable security procedures and practices to protect it.

CALIFORNIA CONSUMER PRIVACY RIGHTS

California law provides California residents with the following privacy rights:

• Right to access personal information: Individuals exercising this right may request access to the categories and specific pieces of their personal information we have collected in the prior 12-month period. Individuals exercising this right may receive their personal information, when provided electronically, in a readily-useable format.
• Right to deletion: Individuals exercising this right can ask us to delete their personal information we have collected, though we may be permitted to retain personal information for certain purposes.
• Right to disclosure: Individuals exercising this right can receive additional information regarding the sources from which we collect information, the purposes for which we collect and share personal information, the information of theirs we hold, and the categories of parties with whom we share their information.
• Right to opt out of sales: As permitted by applicable law, we may share your personal information for monetary or other valuable consideration (under California law, this is considered a “sale”). You may opt out of such a “sale” of your personal information to third parties. You can exercise your right to opt-out here: Do Not Sell My Personal Information.
• Right to be free from discrimination: Users may freely exercise these rights without fear of being denied goods or services.