Is a company required to respond to a data subject access request electronically?

If a business receives an access request, does it have to provide information that it collected more than a year ago about the consumer?

Should it be called a “privacy policy,” a “privacy notice,” an “information notice,” or something else?

If a website participates in behavioral advertising, does Nevada privacy law require that it disclose that it is “selling” consumers’ information?

Does the CCPA require that a company allow consumers to opt-out (e.g., toggle off) analytics cookies?

Is a business required to post a “do not sell” link if it offers a loyalty program?

If a website participates in behavioral advertising, does the CCPA require that it disclose that it is “selling” consumers’ information?

How much time will a company have to respond to a right to be forgotten request under California law?

Does the CCPA require a cookie banner when a company uses first-party session cookies?

Do all companies have to post their privacy notices online?