To help identify trends in privacy representations, BCLP reviewed the websites and privacy notices of each professional services company listed within the Fortune 500.
The following summarizes current industry trends:
- Privacy notices are, on average, about 7 months old.
- While the majority of professional services companies have updated the privacy notices to account for the CCPA, about a quarter of the companies have not.
- Unlike the Fortune 500 generally, professional services company privacy notices that reference enumerated categories are predominantly using lists (instead of tables or charts) to convey information.
- While a slight majority of companies state that they do not sell personal information, a significant percentage (a little over a quarter) are silent or unclear about their selling practices which, itself, might be alleged to violate the CCPA.
- The vast majority of websites and privacy notices do not include a “Do Not Sell” option.
- Only about a third of companies that disclose that they sell information are providing a “Do Not Sell” option; that is a far smaller percentage than observed in most other industries.
- Most professional services companies offer access and deletion rights.
- The average quantity of behavioral advertising cookies on a corporate homepage is 5.7.
- 37% of professional services companies are deploying a cookie notice or banner, and a significant portion of those are attempting to obtain opt-in consent.
- The deployment of a cookie notice marginally correlates to the use of advertising cookies.
[View source.]
