Turnkey CCPA Solution for Compliers, List Owners and Mailers

What is CCPA?

The California Consumer Privacy Act (CCPA) is a bill meant to enhance privacy rights and consumer protection for residents of California, USA. The bill was passed by the California State Legislature and signed into law on June 28, 2018, to amend Part 4 of Division 3 of the California Civil Code. The CCPA becomes effective on January 1, 2020.

find

In order to provide California consumers with access to, and control over, their Personal Information, the CCPA requires that businesses:

  • Provide two or more designated methods to submit requests for information, including a toll-free number and a web page
  • Provide consumers with a link to a web page titled “Do Not Sell My Personal Information” that allows consumers to opt out of the sale of their personal data
  • Provide consumers an option to have their personal information deleted entirely and to direct any service providers to delete the consumer’s personal information from their records
wedding-planning

Under the CCPA, when a California resident makes a verified request to a business, that business must disclose the following, delivered by mail or electronically:

  • The categories of personal information it collects about the consumer
  • The specific pieces of personal information it collects about the consumer
  • The categories of sources from which that information is collected
  • The business purposes for collecting or selling the information
  • The categories of 3rd parties with which the information is shared or sold

Is My Company Required to Comply?

The CCPA applies to any for-profit business that collects consumers' personal data, that does business in California, and satisfies at least one of the following thresholds:

  • Has annual gross revenues in excess of $25 million
  • Possesses the personal information of 50,000 or more consumers, households, or devices
  • OR
  • Earns more than half of its annual revenue from selling consumers' personal information

For the basics regarding CCPA click here
For the full CCPA text click here

Consequences of Non-Compliance

Businesses found to be in violation of any of their obligations imposed by the CCPA are subject to a civil penalty of up to $2,500 per violation and up to $7,500 per willful violation.

myDataPrivacy.com – How It Works

myDataPrivacy.com provides a cost effective, easy-to-implement solution for List Owners and Mailers subject to the CCPA, providing comprehensive data access and disclosure compliance. The site offers central repository for List Owners and Mailers to maintain CCPA-related data points and transactions, relieving them of the burden of managing compliance in-house.

Each list used or sold is uploaded to your account within myDataPrivacy.com. Easy click navigation and drop down menus guide you through the order creation and data upload process. Compliance details such as categories of personal information, specific pieces of information, data sources and categories are captured. File layouts are easily mapped within the system and drag & drop file uploads allow for quick and easy workflows. Suppression and Deletion files are continuously updated and available for download at any time.

How Does myDataPrivacy.com Keep My Business in
Compliance With CCPA?

find

myDataPrivacy.com covers each of these compliance items and then some. Notification, access, disclosure, reporting, opt-out and deletion requests are all handled within the platform. It provides consumers with an easy-access, verified request portal to access their personal information. It offers online reporting to satisfy disclosure requirements along with opt-out and deletion request options.

Broadly speaking, under the CCPA List Owners & Mailers are required to:

  • Inform California consumers of their rights under CCPA
  • Disclose which categories and specific pieces of information are being collected
  • Detail how that information is being used, including to whom it is shared or sold
  • Provide access to personal information via a verified request mechanism
  • Honor opt-out and deletion requests