DATA RISK INTELLIGENCE    |    GDPR       |    WHITEPAPERS

Contact us Today!


Do Not Sell My Personal Information Link for California

Organizations doing business subject to the California Consumer Privacy Act (CCPA) will need to provide a clear and conspicuous link titled “Do Not Sell My Personal Information” on their homepage and in their privacy policy in order to meet the requirements of the new CA privacy law starting January 1, 2020.

The link must go to an Internet Web page enabling a consumer to opt out of the sale of their personal information. Personal information is information that identifies or relates to a particular consumer or household including, but not limited to, name, postal address, email address, IP address, social security number, personal property records, purchasing histories, biometric information, internet activity such as browsing or search history, geolocation data, employment information, education information and inferences drawn from this information, in so far as it is not publicly available information.

The law applies to businesses with over $25 million in revenue, those handling information from 50,000 devices or consumers, or deriving 50%+ annual revenue from selling consumer personal information.

californiaconsumerprivacyactwhitepaper

Businesses that maintain a separate homepage dedicated to California consumers can forego putting the Do Not Sell My Personal Information link on the homepage so long it puts the links on the California specific page and takes reasonable steps to ensure California consumers are directed to the California page and not the homepage provided to the general public (without the link).

Businesses are not allowed to require a consumer to create an account in order to complete the opt-out process. Businesses are also not allowed to use information gathered during the opt-out process from the consumer for other purposes besides complying with the opt-out request.

If a consumer opts out of the sale of personal information, the business must refrain from selling the personal information collected by the business and respect the decision to opt out for at least 12 months before requesting that the consumer opt-in to the sale of their personal information.

stopsign

Businesses also must ensure that all individuals handling consumer inquiries about privacy practices or compliance are informed of the law and know how to direct consumers to exercise their rights.

Consumers may authorize another person to opt out of the sale of their personal information on the consumer’s behalf. Businesses must comply with an opt out request from such an authorized person.

The California Attorney General may develop additional clarifying regulations through a public comment process before the law goes into effect in 2020.

Learn more about California’s new law:

Overview of the California Consumer Privacy Act
Right to Opt Out
Right to Access
Right to Delete
Opt In Consent for Kids
Effective Date for Compliance
Application to non-CA Businesses
Do Not Sell My Personal Information Link
Services Providers
Financial Incentives for Information Sharing
Deidentified and Aggregate Consumer Information
Government Fines and Consumer Damages
Text of AB-375

Clarip CA Consumer Privacy Act Services:
California Consumer Privacy Act Webinar
California Privacy Law Consulting Services
California Privacy Software

Blog Posts on the Privacy Law:
Will California’s Privacy Law Extend to the Rest of the Country?
Privacy Policy Changes Required by California Consumer Privacy Act
Big Day for California Privacy Law
California to Pass New Privacy Law
California Consumer Privacy Act Expected on November Ballot