Owen

In California, the California Consumer Privacy Act of 2018 (CCPA) requires any website that collects Personally Identifiable Information from California consumers to conspicuously post an online privacy policy. The CCPA applies to any company that collects Personally Identifiable Information from California consumers for direct marketing purposes.

Under the CCPA, a “consumer” is any individual who, directly or indirectly, receives goods or services from a company in connection with which the company has collected Personally Identifiable Information from that individual. A company’s collection of Personally Identifiable Information from a consumer includes collecting that information from a web page that the individual visits, from an email that the individual sends to the company, or from a phone call that the individual makes to the company.

The CCPA requires a company that collects Personally Identifiable Information from California consumers to post a privacy policy on its website that discloses the following information about the company’s collection and use of Personally Identifiable Information:

– The name of the company that collected the information

– The categories of Personally Identifiable Information that the company has collected

– The purposes of the company’s collection of Personally Identifiable Information

– The types of Personally Identifiable Information that the company will use or share

– The ways in which the company will protect Personally Identifiable Information

– The fact that the company will disclose Personally Identifiable Information if required to do so by law

The CCPA also requires companies to post a privacy policy on their websites if they sell or lease Personally Identifiable Information to third parties.

The CCPA does not require companies to post a privacy policy if they only collect Personally Identifiable Information from California consumers for marketing purposes and do not use or share the information for any other purpose.

The CCPA does not require companies to post a privacy policy if they only collect.