While section 1798.100(b) of the CCPA requires that a business that collects a consumer’s personal information disclose the first two categories of information “at or before the point of collection,” it does not require that all of the information typically contained in a privacy notice be disclosed at that time. As a result, if a business discloses the categories of information collected and the purpose of the collection to a consumer orally, contextually, or in a summary form at or before the point of collection, the CCPA does not mandate that the entirety of the privacy notice be provided to the consumer. It is worth noting that to the extent that a business collects personal information about California residents online, a separate law – the California Online Privacy Protection Act – may require that the business’s full privacy notice be posted online.1
For more information and resources about the CCPA visit http://www.CCPA-info.com.
This article is part of a multi-part series published by BCLP to help companies understand and implement the General Data Protection Regulation, the California Consumer Privacy Act and other privacy statutes. You can find more information on the CCPA in BCLP’s California Consumer Privacy Act Practical Guide, and more information about the GDPR in the American Bar Association’s The EU GDPR: Answers to the Most Frequently Asked Questions.
1. Cal. Bus. & Prof. Code § 22575(a).
This document provides a general summary and is for information/educational purposes only. It is not intended to be comprehensive, nor does it constitute legal advice. Specific legal advice should always be sought before taking or refraining from taking any action.