Additional CCPA Regulations Approved

The Office of Administrative Law (“OAL”) has approved additional CCPA regulations, which are effective today, March 15, 2021.  The newly-approved regulations affect the following sections of the regulations that went into effect on August 14, 2020. 

• Section 999.306 has been modified to provide examples of how businesses that sell personal information that they have collected in the course of interacting with consumers offline can provide the notice of right to opt-out of the sale of personal information through an offline method. It has also been modified to provide a uniform icon required by the CCPA for the purpose of promoting consumer awareness of the right to opt-out of the sale of personal information.
• Section 999.315 has been modified to provide guidance on how a business’s methods for submitting requests to opt-out should be easy and require minimal steps.  The provision includes illustrative examples of prohibited methods because they are designed with the purpose or substantial effect of subverting or impairing a consumer’s choice to opt-out.
• Section 999.326 has been modified to clarify the proof that a business may require an authorized agent to provide, as well as what the business may require of a consumer to verify their request.
• Section 999.332 has been modified to clarify that businesses subject to either section 999.330, section 999.331, or both of these sections are required to include a description of the processes set forth in those sections in their privacy policies.

Key Takeaways

There’s no one-size-fits all solution to global data privacy; failing to comply with CCPA will lead to lower conversions and financial penalties for noncompliance that could be otherwise avoided by leveraging technologies to take the kind of dynamic approach needed to comply with global regulations as they continue to be enacted, implemented and modified.

How Can Clym Help?

Clym believes in striking a balance between legal compliance and business needs, which is why we provide a cost-effective, scalable and flexible platform to comply with LGPD, GDPR, CCPA and other laws, including those in the UK, as they come online. Our platform provides consumers with an effective and easy-to-navigate way to opt-out of data collection while not infringing upon the website UI that businesses rely on to drive revenues. Contact us today about how your company can implement Clym to help manage your data privacy regulation compliance from a global perspective.