To embed, copy and paste the code into your website or blog:
With the passage of the Consumer Privacy Rights Act (CPRA), we are presenting several blog articles on different topics related to the new law. We previously wrote about key
effective dates and the newly-added definition of
sensitive information. This week, we will focus on consumer opt-out rights and data profiling.
Consumer Opt-Out Rights
The CPRA created several new rights for consumers – one of which is the right to opt out of the sale or the
sharing of their personal information. In order to understand this new opt-out right, we need to review the new definition of sharing personal information in the CPRA.
Thursday, January 28, 2021
With the passage of the Consumer Privacy Rights Act (CPRA), we are presenting several blog articles on different topics related to the new law. We previously wrote about key effective dates and the newly-added definition of sensitive information. This week, we will focus on consumer opt-out rights and data profiling.
Consumer Opt-Out Rights
The CPRA created several new rights for consumers – one of which is the right to opt out of the sale or the
sharing of their personal information. In order to understand this new opt-out right, we need to review the new definition of sharing personal information in the CPRA.
The CCPA has reached the one-year mark. This is a good time for businesses to review the success of their compliance programs and recalibrate for the CCPA’s second year. Here are a few.
Wednesday, January 20, 2021
The CCPA has reached the one-year mark. This is a good time for businesses to review the success of their compliance programs and recalibrate for the CCPA’s second year. Here are a few suggestions to kick off that review:
Privacy Policies. The CCPA requires a business to update the information in its privacy policy or any California-specific description of consumers’ privacy rights at least once every twelve months. If a business has not already done so, now is a good time to review both online and offline data collection practices to ensure privacy policies accurately disclose, at a minimum, the categories of personal information (“PI”) it collected in the preceding 12 months, the categories of PI it sold in the preceding twelve months, and the categories of PI it disclosed for a business purpose in the last 12 months.