[author: Emily Bogin]
These regulations (like those in the California Consumer Protection Act) demand that consumers have the opportunity to make their own choices about how their data is managed. Failure to comply will result in a generous fee, and the fee grows with each infraction. One way for companies to answer the call to compliance? The Consumer Data Request Workflow.
The CCPA demands that consumers are able to take certain actions on their data from the company’s website. What are these Consumer Data Requests (also called “Verifiable Consumer Requests” in CCPA argot)?
Data Deletion:
- Consumers have the right to request that businesses delete the information that the business has collected from that consumer.
- What earns you the CCPA seal of approval? Creating two or more avenues for consumer requests, including a phone number and website.
Do Not Sell:
- Personal Information (PI) is no longer a free-for-all: consumers have the right to opt out of the sale of their PI to third parties.
- What earns you the seal of approval? Businesses must have a link on their webpage that identifies consumers and protects their PI, and these decisions must be respected for at least 12 months.
Disclosure:
- Consumers have the right to request the Personal Information that a company has collected.
- What earns you the seal of approval? Businesses must make two methods of request available to their consumers, including a web request and phone number.
How many businesses will be affected? The CCPA is expected to apply to more than 500,000 U.S. businesses, even those not physically located in California but collecting data on state residents.
Extensions are requested automatically from the workflow if it hits certain complexity requirements or certain dates draw near. Examples are whether a response is required after 45 days (in the case of the Disclosure Request workflow), or the annual reminder to a review his or her “Do Not Sell” request.
Did we mention the audit trail? Every workflow is complete with an audit trail that keeps employees accountable and businesses compliant with all regulations.
