As we’ve previously reported, the California Attorney General (AG) released draft regulations for the California Consumer Privacy Act (CCPA) on October 10, 2019. We’ve addressed new requirements in the regulations that aren’t explicitly contained in the CCPA, and the notice provisions and requirements for handling consumer requests. In this article we’ll drill down on what businesses need to do to verify the identity of consumers making requests concerning their personal information.
General Rules Regarding Verifying Identity
Under the CCPA, consumers can make requests to businesses to either discover the personal information that a business has collected on them (often referred to as the “right to know”), or to delete that information. The proposed regulations present rules and illustrative guidelines for businesses to verify the identity of the consumer making the request to know or request to delete his or her information.
Read the full article here.
Comments