How a consumer may opt out of sale or submit requests under the CCPA:
1: Provide consumers with a method to withdraw their consent to request authorization. After withdrawing the authorization consent, the consumer's sales are withdrawn;
2: Guarantee the right of consumers to refuse sales. Provide consumers with a method to withdraw authorization consent.
How a protected individual can demand deletion of information posted online under Gov. Code sections 6208.1(b) or 6254.21(c)(1):
The act of removing personal information from systems involved in daily business functions so that it cannot be retrieved or accessed
Requirements for personal data controllers include:
a) Under the following circumstances, if the subject of personal information requests deletion, the personal information shall be deleted in a timely manner:
1) The personal information controller collects and uses personal information in violation of laws and regulations;
2) The personal information controller collects and uses personal information in violation of the agreement with the personal information subject.
b) If the personal information controller violates laws and regulations or violates the agreement with the personal information subject to share or transfer personal information to a third party, and the personal information subject requests deletion, the personal information controller shall immediately stop the sharing or transfer and notify timely deletion by third parties;
c) If the personal information controller publicly discloses personal information in violation of laws and regulations or in violation of the agreement with the personal information subject, and the personal information subject requests deletion, the personal information controller shall immediately stop the public disclosure and issue a notice requesting relevant recipients to delete the corresponding information
Additional information about data collecting practices:
Requirements for personal data controllers include:
a) Personal information should not be collected in a fraudulent, deceptive or misleading manner;
b) The function of collecting personal information of the product or service shall not be concealed;
c) Personal information should not be obtained from illegal channels;
d) Personal information that is expressly prohibited by laws and regulations should not be collected.
