Commentors on the final California Consumer Privacy Act regulation queried: “Are session cookies a “unique personal identifier?”
The California Attorney General replied: Maybe, depending on the context.
Commenters on the final California Consumer Privacy Act (CCPA) regulations asked specifically what it means to delete personal information under CCPA?
The California Attorney General’s response? You decide.
Commenters to the final California Consumer Privacy Act (CCPA) regulations asked if it is possible to provide information about, and access to the “Do not Sell” link and/or opt out opportunity in the privacy notice?
The California Attorney General’s answer: No.
Commenters on the final California Consumer Privacy Act (CCPA) regulations asked if a company gives you a product without charge but in consideration for your information, could that still be deemed a financial incentive requiring the company to calculate and disclose the value of the consumer’s data?
The California Attorney General’s answer: Yes.
Compliance takeaways from the International Association of Privacy Professionals (IAPP) California Consumer Privacy Act (CCPA) Enforcement Keynote Session:
Comments to the final California Consumer Privacy Act regulations asked if the CCPA carve-out regarding the Gramm Leach Bliley Act (GLBA), the data protection law governing US financial institutions, applies to:
Comments on the final California Consumer Privacy Act (CCPA) regulations asked if data brokers should be required to identify the factors they use in algorithmic decision making practices that affect the consumer, such as consumer scores?
Comments to the California Consumer Privacy Act (CCPA) final regulations asked: “If you get an access request and you know that the underlying motive for it is to conduct discovery for the purpose of contemplated litigation, do you have to comply with the access request?”
The California Attorney General’s Response: Yes. There is no exception
To extend or not to extend?
AB 1281, extending the employee and B2B exemptions for the California Consumer Privacy Act, has been amended in the California Senate.
Previously a bill dealing with limitations on facial recognition, the legislation now focuses only on the CCPA exemptions.
If passed, the exemption, currently set to expire on January
Under the California Consumer Privacy Act (CCPA), a data breach resulting from a lack of “reasonable security procedures and practices” gives rise to a private right of action (e.g. for a class action lawsuit).
Comments to the final CCPA Regulations asked the California Attorney General for more explicit guidance as to what constitutes such measures.
