Preparing for the California Consumer
Privacy Act (CCPA)

Reputation.com is committed to protecting our customers’ data and to helping our customers comply with all data protection requirements. We welcome the California Consumer Privacy Act (CCPA) as an opportunity to demonstrate Reputation.com’s transparency about its data practices and privacy. We believe that strong data protection is a critical enabler for consumer confidence, which translates into enhanced service offerings and the growth of digital commerce.

We’ve written a whitepaper that describes the key requirements of the CCPA and how the CCPA may impact your organization.

FAQ for CCPA

What is the California Consumer Privacy Act?

The California Consumer Privacy Act of 2018 (CCPA) is a data privacy law passed by the state of California on June 28, 2018. It outlines new standards for data collection, new consequences for businesses that fail to protect user data and new rights that California consumers can exercise over their data.

When is the California Consumer Privacy Act effective date?

The CCPA becomes effective on January 1, 2020.

Who must comply with the CCPA?

The CCPA applies to a “business” that collects the personal information of “consumers” that are California residents.

A “Consumer” is defined under the CCPA as a California resident.

  • The California Code of Regulations defines a resident as follows: “(1) every individual who is in the State for other than a temporary or transitory purpose, and (2) every individual who is domiciled in the State who is outside the State for a temporary or transitory purpose. All other individuals are nonresidents.”

A “Business” is defined by the CCPA as a for-profit entity that collects “consumer” data and also meets one of the following criteria:

  • Has at least $25 Million in annual gross revenue;
  • Annually buys, receives, sells or shares the personal information of 50,000 or more consumers, households, or devices for commercial purposes;
  • Derives 50% or more of its annual revenue from selling consumer personal information.

A “Service Provider” is defined by the CCPA as any entity that processes information on behalf of a business and to which the business discloses a consumer’s personal information for a business purpose pursuant to a written contract.

Notably, the CCPA applies to all businesses, as defined above, that collect data from California residents — regardless of the location of the headquarters of the business itself. In other words, it applies to businesses that are physically located outside of California.

What is “Personal Information” under the CCPA?

Personal information” (“PI”) is broadly defined to mean “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.”

  • The CCPA specifies that Personal Information includes, but is not limited to:
  • Identifiers, such as names, aliases, addresses and IP addresses
  • Characteristics of protected classifications under California or federal law
  • Commercial information, including records of personal property, products or services purchased, or consuming histories or tendencies
  • Biometric information
  • Internet or other electronic network activity information, such as browsing history
  • Geolocation data
  • Audio, electronic, visual, thermal, olfactory, or similar information
  • Professional or employment-related information
  • Education information
  • Any inferences drawn from any of the information identified to create a profile about a consumer

What information is excluded from the CCPA’s definition of “Personal Information”?

The CCPA excludes:

  • “Aggregate consumer information,” which is defined as data that is “not linked or reasonably linkable to any consumer or household, including via a device.”
  • Information that is publicly available from federal, state or local government records is similarly excluded.

What rights do California consumers have regarding their personal information under the CCPA?

For the purposes of this White paper, California Consumers have four main rights.

  1. The right to notice and transparency about the personal data collected about the consumer – which includes the right to request that a business disclose what personal information it has collected about them.
  2. The right to opt out of the sale of their personal information by a business.
  3. The right to have their personal information deleted.
  4. The right not to be discriminated against because they opt out of the sale or their personal information.

Reputation.com Is Taking Action to
Comply with the CCPA

Reputation.com is taking the following steps to prepare for CCPA compliance, all of which will be live on or before January 1, 2020:

  • We are implementing links on our website home page and in our Privacy Policy to enable California consumers to opt out of the sale of their personal information. The links will go live on January 1, 2020.
  • We will launch an online Data Protection Request Form to enable California Consumers to make CCPA dataprotection requests.
  • We are implementing a toll-free number to enable California Consumers to make CCPA requests.
  • We are modifying our Privacy Policy to address the CCPA.
  • We will be amending our terms of service to address the CCPA.

Note:

Rest assured, Reputation.com does not sell any Personal Information to any third-parties. Reputation.com shares Personal Information with certain third-party service providers to assist in delivering its services. Reputation.com will notify these third-party service providers of all personal information deletion requests and take steps to ensure the deletion of personal information by these parties.