In order to provide California consumers with access to, and control over, their Personal Information, the CCPA requires that businesses:
- Provide two or more designated methods to submit requests for information, including a toll-free number and a web page
- Provide consumers with a link to a web page titled “Do Not Sell My Personal Information” that allows consumers to Opt Out of the sale of their personal data
- Provide consumers an option to have their personal information deleted entirely and to direct any service providers to delete the consumer’s personal information from their records
Under the CCPA, when a California resident makes a verified request to a business, that business must disclose the following, delivered by mail or electronically:
- The categories of personal information it collects about the consumer
- The specific pieces of personal information it collects about the consumer
- The categories of sources from which that information is collected
- The business purposes for collecting or selling the information
- The categories of 3rd parties with which the information is shared or sold
The CCPA applies to any for-profit business that collects consumers' personal data, that does business in California, and satisfies at least one of the following thresholds:
- Has annual gross revenues in excess of $25 million
- Do you annually buy, receive for commercial purposes, sell or share for commercial purposes personal information of 50,000 or more California consumers, households or devices?
- OR
- Earns more than half of its annual revenue from selling consumers' personal information
For the basics regarding CCPA click here
For the full CCPA text click here
myDataPrivacy.com provides a cost effective, easy-to-implement solution for List Owners and Mailers subject to the CCPA, providing comprehensive data access and disclosure compliance. The site offers central repository for List Owners and Mailers to maintain CCPA-related data points and transactions, relieving them of the burden of managing compliance in-house.
Each list used or sold is uploaded to your account within myDataPrivacy.com. Easy click navigation and drop down menus guide you through the order creation and data upload process. Compliance details such as categories of personal information, specific pieces of information, data sources and categories are captured. File layouts are easily mapped within the system and drag & drop file uploads allow for quick and easy workflows. Suppression and Deletion files are continuously updated and available for download at any time.
myDataPrivacy.com covers each of these compliance items and then some. Notification, access, disclosure, reporting, opt-out and deletion requests are all handled within the platform. It provides consumers with an easy-access, verified request portal to access their personal information. It offers online reporting to satisfy disclosure requirements along with opt-out and deletion request options.
Broadly speaking, under the CCPA List Owners & Mailers are required to:
- Inform California consumers of their rights under CCPA
- Disclose which categories and specific pieces of information are being collected
- Detail how that information is being used, including to whom it is shared or sold
- Provide access to personal information via a verified request mechanism
- Honor opt-out and deletion requests