The California Consumer Privacy Act (CCPA)

Organizations doing business subject to the California Consumer Privacy Act (CCPA) will need to provide a clear and conspicuous link titled “Do Not Sell My Personal Information” on their homepage and in their privacy policy in order to meet the requirements of the new CA privacy law starting January 1, 2020.

Privacy Considerations – The California Consumer Privacy Act

Effective date: March 18, 2019

ComplexDiscovery (“us”, “we”, or “our”) operates the https://www.complexdiscovery.com website (the “Service”).

This resource highlights our approach to complying with the California Consumer Privacy Act (CCPA) to protect California consumers rights regarding personal information (PI).

Your Personal Information Rights Under The California Consumer Privacy Act (CCPA)

Effective January 1, 2020, the California Consumer Privacy Act (CCPA) gives California consumers new privacy rights regarding their personal information (PI). These rights include:

  • Abbreviated Disclosure Right Applicable to Businesses that Collect PI: Provides a consumer the right to request that a business disclose the categories and specific pieces of PI collected about them.
  • Expanded Discovery Right Applicable to Businesses that Collect PI: Provides a consumer the right to request that a business disclose the categories and specific pieces of PI collected, sources from which the PI is collected, the business or commercial purpose (similar to legitimate interests under the GDPR) of collection, and to whom the collected PI is shared (i.e., third-party sharing). Consumers have the right to receive a specific notice of the business’ PI collection practices as well as notice of these rights within the business’ general privacy policy.
  • Right to Request Information from Businesses that Sell or Disclose PI for a Business Purpose: Provides consumers the right to request that a business disclose for the previous 12 months: the categories of PI collected and sold; the categories of third parties to whom data is sold; and, the categories of PI disclosed about the consumer for a business purpose. Consumers have the right to receive specific notice of the business’ PI collection practices as well as notice of these rights within the business’ general privacy policy.
  • Right to Opt-Out of the Sale of Data: Gives consumers or their authorized agent the ability to direct businesses to stop selling their PI to third parties. Consumers have the right to receive notice of these rights within the business’ general privacy policy that must contain a separate link to the “Do Not Sell My PI” web page.
  • Right to Opt-In for Children: Business Obligation Not to Sell Children’s PI Without Affirmative Authorization: Provides that a business must obtain the opt-in consent from the child’s parent or guardian before selling the child’s PI.
  • Deletion Rights: Gives consumers the right to request that a business delete their PI after receipt of a verifiable request. In support of this right, consumers have the right to receive notice of their right to deletion within the business’ general privacy policy.
  • Rights to Access and Portability: Provides consumers the right to access their PI after submitting a verifiable access request.
  • Right Not to be Discriminated Against for Exercising Any of the Consumer’s Rights under the Title: Gives consumers the right to not be discriminated against for exercising their rights under the CCPA. Examples of discrimination include: denying goods or services to the consumer, charging different prices or rates for goods or services, providing a different level or quality of goods or services to the consumer, or suggesting that the consumer will receive a different price or rate for goods or services or a different level or quality of goods or services.

Should you chose to exercise any of these CCPA rights with ComplexDiscovery, please contact us. We will need to verify the requesting consumer’s identity and validity of the request and, upon successful verification, ComplexDiscovery will act on request-specific obligations.

Complete Privacy Policy

We may update our complex ComplexDiscovery Privacy Policy from time to time. We will notify you of any changes by posting updates on our Privacy Policy page.

You are advised to review the Privacy Policy periodically for any changes.

Contact Us

If you have any questions about your personal information handling by ComplexDiscovery, please review our Privacy Policy, and then contact us:

  • By email: privacy@complexdiscovery.com