The Attorney General of California has issued an additional set of modifications to the proposed regulations under the California Consumer Privacy Act (CCPA), and is accepting comments on the proposal until the end of the month.
Xavier Becerra, the Attorney General of California, issued the first set of modifications in February. This new set is based on comments that his office received after the first set of modifications was released.
To help companies understand the changes that were proposed last month and those that were proposed this week, the AG has provided a red-line version of the CCPA, pointing out the changes proposed in each revision.
In Section 999.305, Notice at Collection of Personal Information, the AG has proposed a new subsection with a safe harbor for companies. It says:
- A business that does not collect personal information directly from a consumer does not need to provide a notice at collection to the consumer if it does not sell the consumer’s personal information.
In Section 999.308 – Privacy Policy, the following changes are being proposed:
- Identify the categories of sources from which the personal information is collected. The categories shall be described in a manner that provides consumers a meaningful understanding of the information being collected.
- Identify the business or commercial purpose for collecting or selling personal information. The purpose shall be described in a manner that provides consumers a meaningful understanding of why the information is collected or sold.
The CCPA was enacted last year and went into effect on Jan. 1, 2020. The law gives individuals the right to ask for all of the personal information stored about them by companies for the preceding 12 months. It also gives consumers access to the information stored about them by companies and the right to request that information be deleted.
