CCPA Regulations: IP Addresses And Residence, Backup And Archive Systems, Opt-Outs And Third Parties

Fox Rothschild LLP

Fox Rothschild LLP

More responses from the California Attorney General to questions about the final California Consumer Privacy Act regulations:

Q. Can a business use an IP address to determine if a website visitor is a California consumer?

California Attorney General: Can’t confirm or deny.

“Nothing prevents a business from using an IP address to determine the location for valid business purposes. Whether or not that is a reliable or definitive method to determine residency raises specific legal questions that may require a fact specific determination.”

CCPA Final Regs IP Address and Residence Odia Kagan

Q: Should backup and archive systems be excluded from the deletion requirement pursuant to a CCPA consumer delete request?

AG: No.

The requirement to comply persists and is simply delayed for as long as the information is stored in archived, non-active mode.

No alternative text description for this imageNo alternative text description for this image

Q: When a consumer files an opt-out request but you have shared information with a third party after receipt of the request — when do you need to tell third parties not to further sell?

AG: Within 15 days of receipt of the request.

Note that the default requirement regarding opt-out requests is to fulfill the request “as soon as feasibly possible.”

Based on the European experience with “without undue delay” (which applies to data breach notifications), “as soon as feasibly possible” is a fact-specific analysis but regulators scrutinize the facts carefully.

CCPA Final Regs Series Third Party Notification Odia Kagan

[View source.]

Written by:

Fox Rothschild LLP

Fox Rothschild LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.