Questions tagged [ccpa]
The California Consumer Privacy Act is a state statute intended to enhance privacy rights and consumer protection for residents of California, United States.
29
questions
0
votes
1
answer
37
views
When Company A's headquarters is in California, and is CCPA compliant, can a CA user demand deletion of all personal info?
Company A headquartered in California. Its website has CCPA (California Consumer Privacy Act) complainant page.
Can a user that lives in California demand that Company A delete all of the user's ...
- 507
16
votes
5
answers
7k
views
Do schools have permission to use pictures containing my face taken inside school forever if I agreed to it?
On day one of my first year in high school me and basically every other students were given a few documents to sign. One of them included a clause that allowed the school to publish pictures of us ...
- 161
3
votes
1
answer
987
views
If website uses cookies only after users login, can I ask for cookie consent during account creation instead of website launch?
I have a website that uses cookies only if the user logs in. Is it necessary to show a cookie popup banner at website launch or can I ask for consent when user is creating an account (the standard I ...
- 143
2
votes
1
answer
215
views
Comcast Xfinity CCPA Policy
I have an old login with Comcast under a relative’s primary (billed) account that I'd like to have deleted under CCPA. The relative lives in Florida, but I am a California resident. I'm attempting to ...
- 49
1
vote
1
answer
37
views
Privacy Policy change for different Countries / Continents on Website
I'm currently researching the GDPR Terms for a European Website. The Company has its headquarters and registration in Europe.
If someone from, let's say US, visits the website, do I have to cover the ...
- 13
3
votes
0
answers
73
views
Are apps required to notify users when they update their privacy policy or EULA?
I have noticed that many companies are doing this but definitely not all.
Furthermore, what about cases where companies or developers cannot notify users because some users are not logged-in or ...
- 151
7
votes
2
answers
2k
views
Are push tokens considered PII under the GDPR or the CCPA?
I'm building a server for an app and I'm trying to get my privacy protections right.
The app allows users to opt in to push notifications. If the user opts in, then I save a push notification token ...
- 173
3
votes
3
answers
375
views
Why is the onus for adhering to privacy directives (e.g. GDPR, CCPA, etc.) on a host and not the user?
(Apologies in advance for the lengthy epistle)
Background:
A colleague is planning to launch a social media and forum website which will appeal to a relatively narrow audience. For the sake of ...
- 197
3
votes
1
answer
328
views
What is the most comparable American law to GDPR right to subject access? Privacy Act?
HIPAA seems comparable but only applies to medical data, but is there anything more general than that?
How does privacy act compare to data subject access rights under gdpr? Is it that it only applies ...
0
votes
1
answer
224
views
Google CCPA Request
In Google's CCPA report, it claims that users can request data deletion via this link. However, the link provides no way to submit a request, and Google claims that there is no Google-wide support ...
- 431
1
vote
1
answer
36
views
Does CCPA require deletion of personal information when it's never sold?
I've been reading the documentation about CCPA, and from my understanding, if you don't sell users' data, you don't have to present an option to opt out.
But another part of CCPA is the ability for a ...
- 261
1
vote
1
answer
72
views
Privacy Policy and CCPA - selling of personal information
I would like to know if the following scenario is considered as "selling personal information" according to CCPA:
Scenario:
Have a subscription based web application. For payment have an ...
- 113
3
votes
1
answer
73
views
Site user posts data under licnese, can user demand erasure?
Suppose that a site, run as a free service, allows communication between users (a chat site). Suppose that the site also permits users to optionally upload text documents or images, which will be ...
- 113k
0
votes
1
answer
73
views
CCPA do I need to provide a "Do not sell my info" link if I don't sell people's information?
Suppose that a developer is using https://termly.io to generate some legal documents for a website. It says the developer needs to provide a specific link that says "Do not sell my info". ...
- 261
1
vote
1
answer
106
views
What is the relationship between free speech and data privacy?
I am learning the basics about CCPA, hoping to create a directory of organizations (and the people of those organizations), in a community-driven fashion like Wikipedia. From what I understand now, ...
- 769
5
votes
1
answer
288
views
What can I do if my CCPA request is being ignored?
I’m a California resident and requested to inspect my data with a certain tech company using their online form. That is now over 3 months ago. Two weeks ago, I followed up with them by email. So far I ...
- 153
-1
votes
1
answer
73
views
Under CCPA are we required to provide salt cryptography on request?
Basically a cryptography salt is a unique code associated with each password which is used for security purposes.
There doesn't seem to be anything worthwhile a user can do with it. If someone just ...
0
votes
1
answer
43
views
Can specific information be needed for verification in CCPA?
If a site is registering users with name display , email and password (I am not reffering to stackexchange . ) The name is available for public display . The site provides access to account when ...
0
votes
1
answer
88
views
Are businesses required to respond under CCPA even if the person is spamming?
If someone from a network of an user is conducting a DDOS attack on a website they will probably block the network. If the user spams a business's server they may be blocked from the email of the ...
1
vote
1
answer
162
views
Advertising in mobile apps and proof of consent
What does CCPA require for proof of consent to display advertising in mobile applications (vs a web site), especially for apps that do not create a user profile? Hypothetically, would it be sufficient ...
- 27
-3
votes
1
answer
94
views
Is it possible to bypass CCPA using EULA
Is it possible to avoid CCPA by using an EULA that explicitly bans users with residence location or relation to California?
By writing that the app is not intended to target californians and that ...
user35276
0
votes
2
answers
228
views
In the United States is doing business in only some states considered discrimination?
A business would like to only operate in states except for California to avoid the $7500-per-person fine CCPA demands. Is it legal or would the business have to leave out the whole of USA?
For ...
user35276
-4
votes
1
answer
183
views
What is the meaning of mail in the CCPA (California Consumer Privacy Act of 2018)?
The CCPA states that under section 1798.130(2) customers can request their data BY_MAIL OR BY ELECTRONIC MEANS as the customer chooses.
However NOWHERE on any website can I find a button or form to ...
user35276
2
votes
1
answer
222
views
Cookie consent compliance: disabling JavaScript and keyboard accessibility
I've noticed that most cookie consent solutions are JavaScript based, and when you have JS disabled, the cookie consent settings may not be accessible.
Speaking of accessibility, some cookie consent ...
1
vote
1
answer
138
views
Do users who are given another user's email address have obligations under GDPR?
I have an app/website which connects people into groups and then the group performs work in the real world. That work in the real world will occasionally require that group members talk to each other. ...
- 13
1
vote
2
answers
757
views
Is it legal for a business to store and use my payment information in a way that I can't edit, remove, or otherwise control?
I recently moved from a townhouse where I used Waste Management for my trash and recycling pick up. The apartment I moved into takes care of trash so last month I canceled the service, got a phone ...
- 164
4
votes
2
answers
810
views
Is facebook in violation of CCPA if they don't delete all messenger messages when you delete your account?
It seems like Facebook won't delete your messages from the recipient's inbox when you delete your account. People send a lot of personal information in messages including their address, phone number, ...
- 49
0
votes
1
answer
44
views
GDPR & CCPA compliance involving terms of service violation
If a user writes a comment on a website that gets flagged and removed+archived are we still obligated to delete the user content and/or the association of that comment with the person? According to ...
- 101
2
votes
2
answers
128
views
Definition of a Household or Device in the context of the California Consumer Privacy Act (CCPA)
The California Consumer Privacy Act (CCPA) applies to a business if it meets one of:
Has annual gross revenues in excess of twenty-five million dollars...
Alone or in combination, annually buys, ...
- 23