California Consumer Privacy Act (CCPA) Overview
The California Consumer Privacy Act (CCPA) provides California consumers with new rights regarding their personal information and imposes data protection responsibilities on certain entities that conduct business in California. The CCPA goes into effect January 1, 2020.
At a high level, the law affords Californians several key rights, including rights to:
- Request information (data access)
- Opt out of the sale of personal information (a very broadly-defined right to opt out of sharing of information with third parties)
- Have personal information deleted
- Be informed that personal information is being disclosed or sold
The CCPA applies to businesses that do business in California and, although not explicitly mentioned, the CCPA is presumably applicable to a business established outside of California if it collects and / or sells California Consumers’ Personal Information while conducting business in California.
Sertifi and the CCPA
Sertifi fulfills legal requirements under the CCPA and gives necessary rights to Sertifi customers so they could be in control of the personal information entrusted to Sertifi for processing.
In providing these services to its customers (“businesses”) Sertifi processes Personal Information on their behalf and acts as a “service provider.” Therefore, security, privacy and integrity are critical to Sertifi and our relationships with our customers. We are committed to continuing to build on our experience to help our customers to comply with the CCPA through leading-edge technology solutions that enhance privacy, as well as cloud solutions that aim to deliver both security and privacy.
In the event Sertifi acts as a “business” and on its own determines the purposes and means of the processing, it will comply with all necessary requirements stipulated by the CCPA, including the fulfillment of Consumers’ legitimate requests. Such rights granted to Consumers will be disclosed in the comprehensive Privacy Statements found here and / or Privacy Notices shown to Consumers at or before the point when their Personal Information will be collected by Sertifi.
Does Sertifi Sell Personal Information to Third Parties?
Sertifi does not sell Personal Information collected about Consumers to third parties. In the event Sertifi decides to change this approach, it will notify its (i) customers (and modify applicable agreements, if required) and (ii) Consumers via applicable Privacy Statement / Notice to be shown to the Consumers at or before the time of collection of their Personal Information.
Please let us know if you have any questions with respect to Sertifi and the CCPA or need support for your Personal Information handling activities. You may contact your local Sertifi representative or reach out directly at [email protected], and we will address all your questions and support your individual needs.