Home Table of Contents

§ 999.312. Methods for Submitting Requests to Know and Requests to Delete.

11 CA ADC § 999.312BARCLAYS OFFICIAL CALIFORNIA CODE OF REGULATIONS

Barclays Official California Code of Regulations Currentness
Title 11. Law
Division 1. Attorney General
Chapter 20. California Consumer Privacy Act Regulations
Article 3. Business Practices for Handling Consumer Requests
11 CCR § 999.312
§ 999.312. Methods for Submitting Requests to Know and Requests to Delete.
(a) A business that operates exclusively online and has a direct relationship with a consumer from whom it collects personal information shall only be required to provide an email address for submitting requests to know. All other businesses shall provide two or more designated methods for submitting requests to know, including, at a minimum, a toll-free telephone number. Other acceptable methods for submitting these requests include, but are not limited to, a designated email address, a form submitted in person, and a form submitted through the mail.
(b) A business shall provide two or more designated methods for submitting requests to delete. Acceptable methods for submitting these requests include, but are not limited to, a toll-free phone number, a link or form available online through a business's website, a designated email address, a form submitted in person, and a form submitted through the mail.
(c) A business shall consider the methods by which it primarily interacts with consumers when determining which methods to provide for submitting requests to know and requests to delete. If the business interacts with consumers in person, the business shall consider providing an in-person method such as a printed form the consumer can directly submit or send by mail, a tablet or computer portal that allows the consumer to complete and submit an online form, or a telephone with which the consumer can call the business's toll-free number.
(d) A business may use a two-step process for online requests to delete where the consumer must first, submit the request to delete and then second, separately confirm that they want their personal information deleted.
(e) If a consumer submits a request in a manner that is not one of the designated methods of submission, or is deficient in some manner unrelated to the verification process, the business shall either:
(1) Treat the request as if it had been submitted in accordance with the business's designated manner, or
(2) Provide the consumer with information on how to submit the request or remedy any deficiencies with the request, if applicable.
Note: Authority cited: Section 1798.185, Civil Code. Reference: Sections 1798.100, 1798.105, 1798.110, 1798.115, 1798.130, 1798.140 and 1798.185, Civil Code.
HISTORY
1. New article 3 (sections 999.312-999.318) and section filed 8-14-2020; operative 8-14-2020 pursuant to Government Code section 11343.4(b)(3) (Register 2020, No. 33).
This database is current through 10/16/20 Register 2020, No. 42
11 CCR § 999.312, 11 CA ADC § 999.312
End of Document© 2020 Thomson Reuters. No claim to original U.S. Government Works.