3 • Describe the consumer’s right to opt out of the sale of personal information. To do this, the Privacy Policy must:
A. Provide instructions for submitting a verifiable consumer request to delete and provide links to an online request form or portal for making the request, if offered by the business; and
B. Describe the process the business will use to verify the consumer request, including any information that the consumer must provide.
4 • Explain that the consumer has a right not to be treated differently because the consumer has exercised privacy rights conferred by the CCPA;
5 • Explain how a consumer can designate an authorized agent to make a request under the CCPA on the consumer’s behalf;
6 • Provide consumers with a contact to whom they may direct questions or concerns about the business’s privacy policies and practices;
7 • State the date the privacy policy was last updated.
8 • If a business alone or in combination annually buys, receives, sells or shares the personal information of 4 million or more consumers, the Privacy Policy also must report the following metrics for the previous calendar year:
A. The number of requests to know, delete and opt-out that the business received, complied with in whole or in part, and denied; and
B. The median number of days within which the business substantively responded to requests to know, requests to delete, and requests to opt out.