(1) identify the types of PII you collect and the categories of third-party entities with which you may share that information;
(2) provide a description of how consumers may review or request changes to personal information collected through the website or service;
(4) list the policy’s effective date.
Your business will in violation of California’s privacy law if you fail to post your policy within 30 days after being notified of noncompliance.
Any business collecting PII on California residents – even if the business is not based in California – should assess its current website privacy policies to ensure it is compliant with California’s laws requiring disclosure of its privacy policies.