An FAQ of data protection and the Data Protection Act
Data protection is at the heart of what our PrivacyRun system has been designed to manage. But what is it, exactly? And how do […]
Following previous modifications in October 2019, and in February and March 2020, the latest updates landed in December, delivered by the California Department of Justice.
Each set of the previous modifications results from taking account of, and action on, the comments made to each of the developments in the earlier sets.
This latest, fourth set of modifications is primarily concerned with:
The proposed modifications concerning the right to opt-out are concerned with businesses selling personal information gathered in offline situations.
The new regulation dictates that companies should provide an opt-out of selling personal data in that same situation.
It delivers strong examples here—if the data is gathered during a phone call, the call must include dialogue that makes the subject aware that their data may be sold and an opportunity to opt-out from its selling. In this situation, the opt-out is verbal, as is the rest of the conversation and its arrangements and agreements.
The same must be provided then, in written arrangements, verbal methods in other situations (face-to-face, in-store, or video calling, for example), and during any other offline method.
The use of an opt-out button looks to have been standardized by introducing a uniform logo that all companies should use when implementing the option. There are supporting instructions relevant to its use—once again, to keep the system standardized across the market.
An opt-out button was included in the first set of the CCPA regulation modifications, yet was removed due to negative feedback.
The following paragraphs were added to create a new section of the regulations, the first covers a smaller simple blue coloured tick/cross image, and the second the same image with the Do Not Sell My Personal Information wording to its right-hand side:
The final modification includes instruction into streamlining the opt-out process as much as possible.
This subsection details that the method to opt-out should be just as simple as opting in, with no additional steps included in the process. Both options should contain the same number of steps in their process.
Comments to modifications closed on December 28th 2020.
For the full set of changes and modifications can be viewed here.