Life with GDPR - ICO Gets Serious About Subject Access Requests
SARS and Liability Issues under GDPR
No. Much like the GDPR, the CCPA gives consumers certain rights over their data. In particular, California residents have the right to request access to their personal information, the right to request the deletion of...more
Yes. Pharmaceutical companies within the Fortune 500 are universally notifying Californians of their right to request access to, or the deletion of, their personal information....more
No. When a business receives a request from a consumer to access the personal information that the business has “collected,” it must decide whether to grant the request or to deny it based upon one of the exceptions to...more
No. While some businesses decide to create a written policy or procedure for handling access requests, other businesses decide that such a policy is unneeded....more
The CCPA requires that a business “deliver” the information that is required to be produced under the Act within “45 days of receiving a verifiable consumer request.” The 45 day time period can be extended by an additional 45...more
The CCPA requires a business to respond to an access request by disclosing all information that it has “collected” about a consumer in the previous 12 months. Unlike the CCPA’s treatment of a business’s obligation to delete...more
The California Attorney General recently published a report assessing CCPA compliance costs. The report attempts to quantify the monetary value of consumers’ personal data, and estimates the total value of personal data...more
In the run-up to January 1, 2020, the California legislature and Attorney General are rushing to provide clarity to the California Consumer Privacy Act of 2018 (CCPA) - and businesses are rushing to interpret and implement...more
No. The CCPA contains four references to the obligation of a business to, in response to an access request, provide the “specific pieces of personal information” that it has collected about a California resident. Each of...more
The California Attorney General Xavier Becerra on Oct. 10, 2019, released the proposed text for the California Consumer Privacy Act Regulations (Regulations). The Regulations are intended to guide businesses on CCPA...more
No. Section 1798.150 of the CCPA permits consumers to “institute a civil action” only where consumer “nonencrypted or nonredacted personal information, as defined in subparagraph (A) of paragraph (1) of subdivision (d) of...more