The California Attorney General has approved some modifications to regulations of the California Consumer Privacy Act (CCPA). The four new changes, which become effective today, are described by the California AG as follows:
- Section 999.306 has been modified to provide examples of how businesses that sell personal information that they have collected in the course of interacting with consumers offline can provide the notice of right to opt-out of the sale of personal information through an offline method. It has also been modified to provide a uniform icon required by the CCPA for the purpose of promoting consumer awareness of the right to opt-out of the sale of personal information.
- Section 999.315 has been modified to provide guidance on how a business’s methods for submitting requests to opt-out should be easy and require minimal steps. The provision includes illustrative examples of prohibited methods because they are designed with the purpose or substantial effect of subverting or impairing a consumer’s choice to opt-out.
- Section 999.326 has been modified to clarify the proof that a business may require an authorized agent to provide, as well as what the business may require of a consumer to verify their request.
- Section 999.332 has been modified to clarify that businesses subject to either section 999.330, section 999.331, or both of these sections are required to include a description of the processes set forth in those sections in their privacy policies.
For more information about the amendments to the CCPA regulations, or to review the documents submitted to OAL, please visit https://oag.ca.gov/privacy/ccpa/regs.
For additional information about the CCPA, contact my colleague and “CCPA All-Star” Colman McCarthy,