{"id":2170,"date":"2025-05-01T12:50:55","date_gmt":"2025-05-01T16:50:55","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/legal\/?page_id=2170"},"modified":"2025-07-08T12:20:25","modified_gmt":"2025-07-08T16:20:25","slug":"ccpa-compliance","status":"publish","type":"page","link":"https:\/\/www.inmotionhosting.com\/legal\/ccpa-compliance\/","title":{"rendered":"California Consumer Privacy Act of 2018"},"content":{"rendered":"
\r\n\r\n\r\n

California Consumer Privacy Act of 2018<\/b><\/h1>\r\n

PRIVACY NOTICE FOR CALIFORNIA RESIDENTS<\/span><\/p>\r\n

Last Updated: July 8, 2025<\/span><\/i><\/p>\r\n

    \r\n
  1. \r\n
      \r\n
    1. Subject to Universal Terms of Service: The following PRIVACY NOTICE FOR CALIFORNIA RESIDENTS (\u201cNotice\u201d) supplements and is subject to InMotion Hosting, Inc.\u2019s, its parent, subsidiaries, affiliates, and brands (collectively, \u201cCompany\u201d) <\/span>Universal Terms of Service<\/span><\/a> (\u201cUToS\u201d), which are incorporated herein by this reference, and applies solely to visitors, users, Customers and others who reside in the State of California (each a \u201cConsumer\u201d and collectively \u201cConsumers\u201d). This Notice is intended to comply with the <\/span>California Consumer Privacy Act of 2018<\/span><\/a>, as amended (\u201cCCPA\u201d) and any terms defined in the CCPA have the same meaning when used in this Notice. Capitalized terms used herein and not otherwise defined herein shall have the meanings set forth in the UToS. In the event of a conflict between this Notice and the UToS, this Notice shall control.\u00a0<\/span><\/li>\r\n
    2. Changes to Company Privacy Notice. Company reserves the right to amend this Notice at Company\u2019s sole discretion and at any time. Continued use of the Websites or Products after changes constitutes acceptance of any changes to this Notice.\u00a0<\/span><\/li>\r\n
    3. Information Company Collects.\u00a0<\/span>\r\n
        \r\n
      1. The Websites and Products collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or Consumer\u2019s device (collectively, \u201cPersonal Information\u201d). The Websites and Products have collected or may collect the following categories of Personal Information from Consumers within the last twelve (12) months:\u00a0<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n<\/ol>\r\n<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
        \r\n

        Category<\/b><\/p>\r\n<\/td>\r\n

        		\r\n

        Examples<\/b><\/p>\r\n<\/td>\r\n

        		\r\n

        Collected<\/b><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        A. Identifiers.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver\u2019s license number, passport number, or other similar identifiers.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        YES<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        B. Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code\u00a7 1798.80(e)).<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver\u2019s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some Personal Information included in this category may overlap with other categories.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        YES<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        C. Protected classification characteristics under California or federal law.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        NO<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        D. Commercial information.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        Records of personal property, cloud services or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        YES<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        E. Biometric information.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        NO<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        F. Internet or other similar network activity.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        Browsing history, search history, information on a consumer\u2019s interaction with a website, application, or advertisement.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        YES<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        G. Geolocation data.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        Physical location or movements.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        NO<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        H. Sensory data.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        Audio, electronic, visual, thermal, olfactory, or similar information.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        YES<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        I. Professional or employment-related information.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        Current or past job history or performance evaluations.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        NO<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34C.F.R. Part 99)).<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        NO<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

        \r\n

        K. Inferences drawn from other Personal Information.<\/span><\/p>\r\n<\/td>\r\n

        		\r\n

        Profile reflecting a person\u2019s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.<\/span><\/p>\r\n<\/td>\r\n

        		\u00a0<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n
          \r\n
        1. Personal Information does not include:\u00a0<\/span>\r\n
            \r\n
          1. Publicly available information from government records.<\/span><\/li>\r\n
          2. Deidentified or aggregated consumer information.<\/span><\/li>\r\n
          3. Information excluded from the CCPA\u2019s scope, including but not limited to:\u00a0<\/span>\r\n
              \r\n
            1. Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; or<\/span><\/li>\r\n
            2. Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver\u2019s Privacy Protection Act of 1994.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n<\/ol>\r\n<\/li>\r\n
            3. Company obtains the categories of Personal Information listed above from the following categories of sources:\u00a0<\/span>\r\n
                \r\n
              1. Directly from Consumer (e.g., from forms Consumer completes or Products and services Consumer purchases).<\/span><\/li>\r\n
              2. Indirectly from Consumer (e.g., from observing Consumer\u2019s actions on the Websites).<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
              3. Use of Personal Information.\u00a0<\/span>\r\n
                  \r\n
                1. Company may use or disclose the Personal Information Company collected for one or more of the following business purposes:\u00a0<\/span>\r\n
                    \r\n
                  1. To fulfill or meet the reason Consumer provided the information (e.g., if Consumer shared Consumer\u2019s name and contact information to request a price quote or ask a question about Company\u2019s Products or services, Company will use that Personal Information to respond to Consumer\u2019s inquiry; if Consumer provides Consumer\u2019s Personal Information to purchase a product or service, Company will use that information to process Consumer\u2019s payment and facilitate delivery; Company may also save Consumer\u2019s information to facilitate new product orders or process returns).<\/span><\/li>\r\n
                  2. To provide, support, personalize, and develop the Websites, Products, and services.<\/span><\/li>\r\n
                  3. To create, maintain, customize, and secure Consumer\u2019s account (i.e., Customer\u2019s Account).<\/span><\/li>\r\n
                  4. To process Consumer\u2019s requests, purchases, transactions, and payments and prevent transactional fraud.<\/span><\/li>\r\n
                  5. To provide Consumer with support and to respond to Consumer\u2019s inquiries, including to investigate and address Consumer\u2019s concerns and monitor and improve Company responses.<\/span><\/li>\r\n
                  6. To help maintain the safety, security, and integrity of the Websites, Products and services, databases and other technology assets, and business.<\/span><\/li>\r\n
                  7. For testing, research, analysis, and product development, including to develop and improve the Websites, Products, and services.<\/span><\/li>\r\n
                  8. To respond to law enforcement and civil requests and as required by applicable law, court order, or governmental regulations.<\/span><\/li>\r\n
                  9. As described to Consumer when collecting Personal Information or as otherwise set forth in the CCPA.<\/span><\/li>\r\n
                  10. To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company\u2019s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by Company about the Websites\u2019 Consumers is among the assets transferred and related transaction matters.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                  11. Company will not collect additional categories of Personal Information or use the Personal Information Company collected for materially different, unrelated, or incompatible purposes without providing Consumer notice.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                  12. Sharing Personal Information.\u00a0<\/span>\r\n
                      \r\n
                    1. Company may disclose Personal Information to a third-party for a business purpose. When Company discloses Personal Information for a business purpose, Company enters into a contract that describes the purpose and requires the third-party recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract with any third-party utilized by the Company. Company may share Consumer\u2019s Personal Information with the <\/span>subprocessors<\/span><\/a>.<\/span><\/li>\r\n
                    2. Disclosures of Personal Information for a Business Purpose.\u00a0<\/span>\r\n
                        \r\n
                      1. In the preceding twelve (12) months, Company has disclosed the following categories of Personal Information for a business purpose:\u00a0<\/span>\r\n
                          \r\n
                        1. Identifiers.<\/span><\/li>\r\n
                        2. California Consumer Records Personal Information categories.<\/span><\/li>\r\n
                        3. Protected classification characteristics under federal law.<\/span><\/li>\r\n
                        4. Commercial information.<\/span><\/li>\r\n
                        5. Internet protocol address, Internet or other similar network activity.<\/span><\/li>\r\n
                        6. Sensory data.<\/span><\/li>\r\n
                        7. Professional or employment-related information.<\/span><\/li>\r\n
                        8. Non-public education information.<\/span><\/li>\r\n
                        9. Inferences drawn from other Personal Information.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                        10. Company discloses Consumer\u2019s Personal Information for a business purpose with the <\/span>subprocessors<\/span><\/a>.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                        11. Sales of Personal Information. In the preceding twelve (12) months, Company has not sold Personal Information in the following categories of Personal Information:\u00a0<\/span>\r\n
                            \r\n
                          1. Identifiers.<\/span><\/li>\r\n
                          2. California Consumer Records Personal Information categories.<\/span><\/li>\r\n
                          3. Protected classification characteristics under federal law.<\/span><\/li>\r\n
                          4. Commercial information.<\/span><\/li>\r\n
                          5. Biometric information.<\/span><\/li>\r\n
                          6. Internet or other similar network activity.<\/span><\/li>\r\n
                          7. Geolocation data.<\/span><\/li>\r\n
                          8. Sensory data.<\/span><\/li>\r\n
                          9. Professional or employment-related information.\u00a0<\/span><\/li>\r\n
                          10. Non-public education information.<\/span><\/li>\r\n
                          11. Inferences drawn from other Personal Information.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n<\/ol>\r\n<\/li>\r\n
                          12. Consumer\u2019s Rights and Choices.\u00a0<\/span>\r\n
                              \r\n
                            1. The CCPA provides Consumers with specific rights regarding their Personal Information. This section describes Consumer\u2019s CCPA rights and explains how to exercise those rights.<\/span><\/li>\r\n
                            2. Access to Specific Information and Data Portability Rights. Consumer has the right to request that Company disclose certain information about Company\u2019s collection and use of Personal Information over the past twelve (12) months. Once Company receives and confirms a verifiable Consumer request (see Exercising Access, Data Portability, and Deletion Rights below), Company will disclose to Consumer:\u00a0<\/span>\r\n
                                \r\n
                              1. The categories of Personal Information Company collected about Consumer.<\/span><\/li>\r\n
                              2. The categories of sources for the Personal Information Company collected about Consumer.<\/span><\/li>\r\n
                              3. Company business or commercial purpose for collecting or selling that Personal Information.<\/span><\/li>\r\n
                              4. The categories of third parties with whom Company share that Personal Information.<\/span><\/li>\r\n
                              5. The specific pieces of Personal Information Company collected about Consumer (also called a data portability request).<\/span><\/li>\r\n
                              6. If Company sold or disclosed Personal Information for a business purpose, two separate lists disclosing:\u00a0<\/span>\r\n
                                  \r\n
                                1. sales, identifying the Personal Information categories that each category of recipient purchased; and<\/span><\/li>\r\n
                                2. disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n<\/ol>\r\n<\/li>\r\n
                                3. Deletion Request Rights.\u00a0<\/span>\r\n
                                    \r\n
                                  1. Consumer has the right to request that Company delete any of Personal Information that Company collected from Consumer and retained, subject to certain exceptions. Once Company receives and confirms a verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), Company will delete (and direct service providers to delete) Personal Information from Company records, unless an exception applies.<\/span><\/li>\r\n
                                  2. Company may deny a deletion request if retaining the information is necessary for Company or Company service provider(s) to:\u00a0<\/span>\r\n
                                      \r\n
                                    1. Complete the transaction for which Company collected the Personal Information, provide a Product or service that Consumer requested, take actions reasonably anticipated within the context of Company ongoing business relationship with Consumer, or otherwise perform Company contract with Consumer.<\/span><\/li>\r\n
                                    2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.<\/span><\/li>\r\n
                                    3. Debug Products to identify and repair errors that impair existing intended functionality.<\/span><\/li>\r\n
                                    4. Exercise free speech, ensure the right of another Consumer to exercise their free speech rights, or exercise another right provided for by law.<\/span><\/li>\r\n
                                    5. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information\u2019s deletion may likely render impossible or seriously impair the research\u2019s achievement, if Consumer previously provided informed consent.<\/span><\/li>\r\n
                                    6. Enable solely internal uses that are reasonably aligned with consumer expectations based on Consumer\u2019s relationship with Company.<\/span><\/li>\r\n
                                    7. Comply with any legal obligation.<\/span><\/li>\r\n
                                    8. Make other internal and lawful uses of that information that are compatible with the context in which Consumer provided it.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n<\/ol>\r\n<\/li>\r\n
                                    9. Exercising Data Portability, and Deletion Rights.\u00a0<\/span>\r\n
                                        \r\n
                                      1. To exercise the data portability and deletion rights described above, Website users, visitors and\/or non-active customers and active Customers can submit a verifiable consumer request via Company\u2019s <\/span>online form<\/span><\/a>, submit an email to <\/span>privacy@inmotionhosting.com<\/span><\/a>, in writing, via postal mail to Company at InMotion Hosting, Inc., Attn: Data Privacy Team, 2 Constitution Drive, Suite 101, Virginia Beach, VA 23462.\u00a0<\/span><\/li>\r\n
                                      2. Only a Customer, a Consumer on behalf of the Consumer\u2019s minor child, a natural person or a person registered with the Secretary of State, authorized by the Consumer to act on the Consumer\u2019s behalf, may make a verifiable consumer request related to Personal Information.\u00a0<\/span><\/li>\r\n
                                      3. The verifiable consumer request must:\u00a0<\/span>\r\n
                                          \r\n
                                        1. Provide sufficient information that allows Company to reasonably verify requestor\/legal representative is the person about whom Company collected Personal Information; and<\/span><\/li>\r\n
                                        2. Describe in the request with sufficient detail to allow Company to properly understand, evaluate and respond to it.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                                        3. Company cannot respond to a Consumer request or provide a requestor with Personal Information if Company cannot verify identity or authority to make the request and confirm the Personal Information relates to Consumer. Making a verifiable Consumer request does not require creation of a Customer Account. Company will only use Personal Information provided in a verifiable Consumer request to verify the Consumer\/requestor\u2019s identity or authority to make the request.<\/span><\/li>\r\n
                                        4. For instructions on exercising sale opt-out rights, see Personal Information Sales Opt-Out and Opt-In Rights below.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                                        5. Response Timing and Format.\u00a0<\/span>\r\n
                                            \r\n
                                          1. Company shall use commercially reasonable efforts to respond to a verifiable Consumer request within forty-five (45) days of receipt but no more than ninety (90) days. Company will deliver a written response by mail or electronically, as determined in Company\u2019s sole discretion, to Consumer\/requestor. Requests that Company cannot comply with will receive an explanation, if applicable. For data portability requests, Company will select a format to provide Personal Information that is readily usable and should allow transmission of the information.<\/span><\/li>\r\n
                                          2. Verifiable consumer requests carry no charge to process.<\/span><\/li>\r\n
                                          3. All Consumer\u2019s client data provided to Company is subject to data privacy laws and Consumer is responsible for obtaining the proper consent from such client(s) prior to sharing of Personal Information with Company.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                                          4. Personal Information Sales Opt-Out and Opt-In Rights. If a Consumer is sixteen (16) years of age or older, Consumer has the right to direct Company to not sell Personal Information at any time (the \u201cright to opt-out\u201d). Company does not sell the Personal Information of Consumers actually know are less than sixteen (16) years of age, unless Company receives affirmative authorization (the \u201cright to opt-in\u201d) from either the consumer who is between thirteen (13) and sixteen (16) years of age, or the parent or guardian of a consumer less than thirteen (13) years of age. Consumers who opt-in to Personal Information sales may opt-out of future sales at any time.<\/span><\/li>\r\n
                                          5. To exercise the right to opt-out, Consumer (or Consumer\u2019s authorized representative) may <\/span>submit a request<\/span><\/a> to Company. Once Consumer makes an opt-out request, Company will wait at least twelve (12) months before asking Consumer to reauthorize Personal Information sales. However, Consumer may change Consumer\u2019s mind and <\/span>opt back in to Personal Information sales at any time by completing the form<\/span><\/a> and checking the box that says, \u201cOPT-IN: I Opt-In to the \u201cSale\u201d or \u201cSharing\u201d of my Personal Information related to tailored advertising on this website.\u201d<\/span><\/li>\r\n
                                          6. Consumer does not need to create a Customer Account with Company to exercise Consumer\u2019s opt-out rights. Company will only use Personal Information provided in an opt-out request to review and comply with the request.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                                          7. Non-Discrimination.\u00a0<\/span>\r\n
                                              \r\n
                                            1. Company will not discriminate against Consumer for exercising any of Consumer\u2019s CCPA rights. Unless permitted by the CCPA, Company will not:\u00a0<\/span>\r\n
                                                \r\n
                                              1. Deny Products or services.<\/span><\/li>\r\n
                                              2. Charge different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.<\/span><\/li>\r\n
                                              3. Provide a different level or quality of Products or services.<\/span><\/li>\r\n
                                              4. Suggest that Consumer may receive a different price or rate for Products or services or a different level or quality of Products or services.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                                              5. Company may offer Consumer certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive offer will reasonably relate to Personal Information\u2019s value and contain written terms that describe the program\u2019s material aspects. Participation in a financial incentive program requires Consumer prior opt-in consent, which Consumer may revoke at any time.<\/span><\/li>\r\n<\/ol>\r\n<\/li>\r\n
                                              6. Other California Privacy Rights. California\u2019s \u201cShine the Light\u201d law (<\/span>Civil Code Section \u00a7 1798.83<\/span><\/a>) permits visitors, users, and Customers of the Websites that are California residents to request certain information regarding Company\u2019s disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please complete the <\/span>Personal Data Request<\/span><\/a> form, or send an email to <\/span>privacy@inmotionhosting.com<\/span><\/a> or send by postal mail at: InMotion Hosting, Inc., Attn: Data Privacy Team, 2 Constitution Drive, Suite 101, Virginia Beach, VA 23462.<\/span><\/li>\r\n
                                              7. Contact Information. Any questions or comments about this Notice, the ways in which Company collects and uses Personal Information described in the <\/span>Privacy Policy<\/span><\/a>, Consumer\u2019s choices and\/or rights regarding such use, or wish to exercise Consumer\u2019s rights under California law may, contact Company at the address and\/or email listed herein.<\/span><\/li>\r\n<\/ol>\r\n

                                                CALIFORNIA\u2019S CONSUMER PRIVACY ACT OF 2018<\/span><\/p>\r\n

                                                SECTION-BY-SECTION NOTICE REQUIREMENT SUMMARY<\/span><\/p>\r\n

                                                The following chart identifies and summarizes the primary statute sections relating to the CCPA\u2019s generalized notice or disclosure requirements.<\/span><\/p>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
                                                \r\n

                                                CCPA Section<\/b><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                General Notice or Information Disclosure Summary<\/b><\/p>\r\n<\/td>\r\n<\/tr>\r\n

                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.100(b)<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                Must inform consumers, before or at the point of collection:\u00a0<\/span><\/p>\r\n

                                                  \r\n
                                                • What personal information categories a business collects.<\/span><\/li>\r\n
                                                • Its intended use purposes.<\/span><\/li>\r\n<\/ul>\r\n

                                                  Prohibits collection of additional personal information categories or using collected personal information for additional purposes without providing this required notice.<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.105(b)<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                Must disclose the consumer\u2019s deletion right.\u00a0Cross-references Section 1798.130 for the disclosure requirement.<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.110(c)<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                If a business collects personal information about a consumer, it must disclose:\u00a0<\/span><\/p>\r\n

                                                  \r\n
                                                • Personal information categories collected.<\/span><\/li>\r\n
                                                • Source categories for the personal information collected.<\/span><\/li>\r\n
                                                • Business or commercial purposes for collecting or selling personal information.<\/span><\/li>\r\n
                                                • Third-party categories with which the business shares personal information.<\/span><\/li>\r\n
                                                • The specific pieces of personal information the business has collected about that consumer.<\/span><\/li>\r\n<\/ul>\r\n

                                                  Cross-references Section 1798.130(a)(5)(B) for the disclosure requirement.<\/span><\/p>\r\n

                                                  NOTE: While Section 1798.110(c)(5) does list \u201cthe specific pieces of personal information the business has collected about that consumer\u201d as a required piece of information in the online privacy disclosure, this is likely a statutory drafting error (see Practice Note, Understanding the California Consumer Privacy Act (CCPA): History of the CCPA). Businesses should probably interpret this requirement as referring to the consumer\u2019s specific information (access) rights and not as a requirement to include individual personal information in the online privacy notice (see Practice Note, Understanding the California Consumer Privacy Act (CCPA): Specific Information Rights).<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.115(c)<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                If a business sells personal information or discloses personal information for a business purpose, it must disclose the personal information categories:\u00a0<\/span><\/p>\r\n

                                                  \r\n
                                                • Sold or include a statement that it has not sold personal information.<\/span><\/li>\r\n
                                                • Disclosed for a business purpose or include a statement that it has not disclosed personal information.<\/span><\/li>\r\n<\/ul>\r\n

                                                  Cross-references Section 1798.130(a)(5)(C) for the disclosure requirement.<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.115(d)<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                A third-party purchaser of a consumer\u2019s personal information cannot resell that information unless the consumer receives explicit notice and an opportunity to opt- out.\u00a0Cross-references Section 1798.120 establishing the consumer\u2019s personal information sales opt-out and opt-in rights.<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.120(b)<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                If a business sells personal information to third parties, it must provide notice to consumers that:\u00a0<\/span><\/p>\r\n

                                                  \r\n
                                                • It may sell their information.<\/span><\/li>\r\n
                                                • Consumers have the right to opt-out of these sales. Cross-references Section 1798.135(a) for notice requirements.<\/span><\/li>\r\n<\/ul>\r\n<\/td>\r\n<\/tr>\r\n
                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.125(b)(2) and (3)<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                If a business offers financial incentives for personal information collections, sales, or deletions, it must notify consumers of the financial incentives and clearly describe material terms.\u00a0Cross-references Section 1798.135 for notice requirements.<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.130<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                Primary section discussing both general and specific notice requirements. Cross-references:\u00a0<\/span><\/p>\r\n

                                                  \r\n
                                                • Section 1798.100 (statute introduction and general establishment of information rights).<\/span><\/li>\r\n
                                                • Section 1798.105 (deletion right).<\/span><\/li>\r\n
                                                • Section 1798.110 (disclosures for business that collects personal information).<\/span><\/li>\r\n
                                                • Section 1798.115 (disclosures for business that sells personal information or discloses personal information for a business purpose).<\/span><\/li>\r\n
                                                • Section 1798.125 (non-discrimination rights).<\/span><\/li>\r\n<\/ul>\r\n

                                                  Subsections related to general or public disclosures and notices described below.<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.130(a)(1)<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                Must make available two or more designated methods for submitting verified consumer requests for information disclosures required under:\u00a0<\/span><\/p>\r\n

                                                  \r\n
                                                • Section 1798.110 (disclosures for business that collects personal information).<\/span><\/li>\r\n
                                                • Section 1798.115 (disclosures for business that sells personal information or discloses personal information for a business purpose).<\/span><\/li>\r\n<\/ul>\r\n

                                                  Contact methods must include, at minimum:\u00a0<\/span><\/p>\r\n

                                                    \r\n
                                                  • Toll-free telephone number.<\/span><\/li>\r\n
                                                  • Website address, if the business maintains an internet website.<\/span><\/li>\r\n<\/ul>\r\n<\/td>\r\n<\/tr>\r\n
                                                \r\n

                                                Cal. Civ. Code \u00a7 1798.130(a)(5)<\/span><\/p>\r\n<\/td>\r\n

                                                		\r\n

                                                Must disclose the following information:\u00a0<\/span><\/p>\r\n