Access Requests – the right to access data

Can a company be sued under the CCPA for failing to honor a deletion request?

Can a company be sued under the CCPA for failing to honor an access request?

Can a company be sued under the CCPA for failing to post a privacy notice?

Can a company decide whether to deidentify information or delete information if it receives a ‘right to be forgotten’ request?

Can corporate affiliates share information for marketing purposes?

Deletion Requests – the right to be forgotten (sometimes called the right of erasure or the right to deletion)

Did California Declare War on Attorney Client Privilege? How the CCPA Impacts Privilege Protections

Do companies have to affirmatively state within their privacy policy that they “do not sell” personal information?

Do companies have to provide a privacy notice if they collect personal data about a person from a third party?

Do the CCPA and the GDPR have the same exceptions to the right to be forgotten?

Does a company always have to provide a privacy notice to people from whom it collects information?

Does a company have to forward a right to be forgotten request to a third party with whom it has shared personal information?

Does a loyalty program benefit have to relate to the value provided to a business by consumer data?

Does Nevada’s Requirement to Provide an Opt-Out-of-Sale Mechanism Apply to B2B Companies?

Does the “right to be forgotten” under the California Consumer Privacy Act require that companies delete the same type of information as the “right to be forgotten” under the GDPR?

Does the CCPA apply to personal data about non-Californians (e.g., Europeans)?

Does the CCPA exempt businesses from having to disclose privileged communications?

Frequently Asked Questions Concerning Cookies and AdTech

How far can a company go to validate the identity of an individual making a data subject access request?

If a business allows consumers to redeem loyalty program benefits for products or services offered by a partner, does that constitute the sale of information?

If a business receives a data subject access request, does it have to provide the specific pieces of personal information that it collected about the consumer?

If a business shares information through its loyalty program with a third party fulfillment company is it “selling” information?

If a business voluntarily honors the deletion request of a loyalty program member is it violating the CCPA?

If a business voluntarily honors the deletion request of a loyalty program member, is it violating the CCPA?

If a company already drafted a privacy notice to comply with other United States laws, does it need to change the notice to comply with the CCPA?

If a company experiences a data security breach, and receives a “Right to be Forgotten” request from a data subject whose information was involved, does the company have to delete the information that they have about the individual?

If a company is required to provide a privacy notice, how soon must it be provided?

If a company receives a ‘right to be forgotten’ request from one consumer, does it have to delete information it obtained from other consumers in the same household?

If a company receives a ‘right to be forgotten’ request, does it have to delete the request itself?

If a company receives a data access request from an employee, will it have to share with them performance reviews and other notes and comments in their HR file that implicate other employees?

If a company receives a right to be forgotten request, does it always have to delete the requestor’s information?

If a company receives a right to be forgotten request, does it have to delete the requestor’s IP address from its weblogs?

If a data subject submits an access or deletion request directly to a service provider, is the service provider required to respond to the data subject?

If a Service Provider has already agreed to a Data Processing Addendum that complies with the GDPR, is a business required to renegotiate the contract again for the CCPA?

Is a business prohibited from giving discounts to loyalty program members?

Is a business required to delete loyalty program information if it receives a deletion request from an active member?

Is a business required to delete loyalty program information if it receives a deletion request from an inactive member?

Is a business required to provide a privacy notice in conjunction with a loyalty program?

Is a business required to provide access to all information about the consumer maintained through a loyalty program?

Privacy Policies and Privacy Notices

The Right to Opt-Out of Information Selling

Under the CCPA, can a company send follow-up emails after hosting a trade show or conference?

Under the CCPA, can a company send mass marketing emails to clients or prospects to invite them to a conference or trade show?

Under the CCPA, can a conference organizer use on-site tracking at their conference for first-party marketing?

Under the CCPA, can a conference organizer use on-site tracking at their conference for third-party marketing?

Under the CCPA, can a conference organizer use on-site tracking?

What rights does a consumer have in relation to a loyalty program?

Will the CCPA lead websites to have EU-style cookie banners?