California Privacy Rights
The California Privacy Rights refer to the rights granted to California residents under two key privacy laws: the California Consumer Privacy Act (CCPA) and the California Privacy Rights and Enforcement Act (CPRA). Here are the main terms associated with each of these laws:
California Consumer Privacy Act (CCPA):
- Right to Know: California residents have the right to know what personal information is collected, disclosed, or sold by businesses, and they can request a copy of the specific pieces of information collected about them.
- Right to Delete: Individuals have the right to request the deletion of their personal information held by businesses, subject to certain exceptions.
- Right to Opt-Out: Businesses that sell personal information must provide consumers with the right to opt-out of the sale of their personal data. Consumers have the right to direct businesses to not sell their information.
- Right to Non-Discrimination: Businesses cannot discriminate against consumers who exercise their rights under the CCPA. They cannot deny goods or services, charge different prices, or provide a different level or quality of service.
- Right to Data Portability: Upon request, consumers have the right to receive their personal information in a portable and readily usable format.
- Right to Opt-In for Minors: Businesses must obtain opt-in consent from the parent or guardian of minors under the age of 16 to sell their personal information.
California Privacy Rights and Enforcement Act (CPRA):
The CPRA, also known as Proposition 24, expands and enhances privacy rights for California residents. It builds upon the CCPA and introduces additional provisions, including:
- Sensitive Personal Information: The CPRA introduces a new category called “sensitive personal information,” which includes information such as social security numbers, driver’s license numbers, financial account information, precise geolocation data, and more. Consumers have greater control over the use and sharing of this category of information.
- Establishes California Privacy Protection Agency (CPPA): The CPRA establishes the CPPA as an independent regulatory body responsible for enforcing privacy laws and protecting consumer rights.
- Data Retention: The CPRA introduces limitations on the retention of personal information, requiring businesses to disclose their data retention practices to consumers.
- Enhanced Penalties for Data Breaches: The CPRA increases penalties for data breaches involving consumers’ email addresses and passwords.
Please note that the above summary provides a general overview of the CCPA and CPRA and is not an exhaustive list of their provisions. The laws are complex and may include additional requirements and exceptions. It is recommended to consult the full text of the laws or seek legal advice for a comprehensive understanding of their terms.