The CCPA states that under section 1798.130(2) customers can request their data BY_MAIL OR BY ELECTRONIC MEANS as the customer chooses.
However NOWHERE on any website can I find a button or form to demand information via physical mail and on top of that this is economically infeasible for businesses that are small g frm.
Is everyone non-compliant mr or am I getting something wrong?
I am talking about ip logs mainly here.

  • leginfo.legislature.ca.gov/faces/… This extract may be relevant to others "A business shall be in violation of this title if it fails to cure any alleged violation within 30 days after being notified of alleged noncompliance. Any business, service provider, or other person that violates this title shall be subject to an injunction and liable for a civil penalty of not more than two thousand five hundred dollars ($2,500) for each violation or seven thousand five hundred dollars ($7,500) for each intentional violation..."
    – Rock Ape
    Nov 9 '20 at 15:11
  • Is it illeagal to not provide such a button or form.
    – user35276
    Dec 2 '20 at 7:28
  • 6
    Please, please try to proofread your posts. Use a spelling and grammar checker; there are plenty available. It has so many typos that it's hard to read. For example, I have no idea what "small g frm" or "non-compliant mr" mean.
    – Ryan M
    Dec 2 '20 at 9:12
  • 1
    Further, examples of supposedly non-compliant businesses might be helpful.
    – Ryan M
    Dec 2 '20 at 9:13

You're misreading the law. You need to keep reading the section you referenced (emphasis added):

The disclosure...shall be made in writing and delivered through the consumer’s account with the business, if the consumer maintains an account with the business, or by mail or electronically at the consumer’s option if the consumer does not maintain an account with the business

Thus, the option to have the disclosure sent by mail only applies to consumers who do not have an account with the business. Since presumably a large number of sites only maintain personal information for users with accounts, such sites need not provide a mail option. Further, it doesn't say there needs to be a button: you just need the ability to say you'd like it mailed to you in the request somehow, and then they need to comply when you do.

  • However data like ip logs is never associated with any account.
    – user35276
    Dec 2 '20 at 14:29
  • Could please explain for example a website may have ip logs from millions of users g does that mean they must require to give in writing the response to a million users?Anyone will go bankrupt like this.
    – user35276
    Dec 3 '20 at 11:30
  • @astackexchangeuser IP logs alone, without accompanying profiles, would likely not be personal information in many (but perhaps not all) cases. See Is an IP address considered “personal information” under the CCPA?
    – Ryan M
    Dec 3 '20 at 11:40
  • Thanks for that our website will anyway flush logs everyday.
    – user35276
    Dec 3 '20 at 11:49
  • I know I am extending this discussion too much but what if ip used for protection against DDOS.
    – user35276
    Dec 3 '20 at 11:54

This site is temporarily in read only mode and not accepting new answers.