Compliance Glossary

The California Consumer Privacy Act establishes a set of fundamental rights for the residents of California, known as data subjects concerning their personal information. These rights empower consumers with greater control over their data and increase transparency in how businesses handle their personal information. 

The key Data Subject Rights under the CCPA are:

Right to know: Consumers have the right to request that businesses disclose the categories and specific pieces of personal information collected about them, the sources of that information, the purpose for collecting or selling the information, and the categories of third parties with whom the information is shared. 

Right to delete: Consumers can request the deletion of their personal information collected by businesses, subject to certain exceptions such as completing transactions, detecting security incidents, or complying with legal obligations. 

Right to opt-out: Consumers have the right to direct businesses not to sell their personal information to third parties. Businesses must provide a clear and conspicuous “Do Not Sell My Personal Information” link on their website homepage to facilitate this right.

Right to non-discrimination: Businesses are prohibited from discriminating against consumers who exercise their CCPA rights. This includes denying goods or services, charging different prices, or providing a different quality of goods or services.

Right to access: Consumers can request access to their personal information free of charge, delivered by mail or electronically in a readily usable format that allows the consumer to transmit this information to another entity without hindrance.

Right to correct: Consumers have the right to correct inaccurate personal information that a business has about them.

Right to limit use:  Consumers have the right to limit the use and disclosure of sensitive personal information collected about them.

These Data Subject rights form the core of the CCPA’s consumer protection and aims to promote transparency, control, and accountability in the handling of personal information by businesses.