With privacy regulations, the major focus is on protecting data for consumers and providing them with an easy way to exercise their data rights.
Major new data protection regulations (CCPA/GDPR) introduced include:
- Right to access information – Consumers have the right to know the “who, what, why” surrounding their personal information. Specifically, they must have access to personal information that has been collected about themselves, in a portable format. Types of information they can request include:
- Which categories of personal information were collected, shared, or sold?
- Categories of sources where the personal information was collected, with whom it was shared, and to whom it was sold
- The specific information that was collected about themselves
- The purpose for which the personal information was collected
- Right to deletion – Consumers may request that a company delete the personal information it has collected about them.
- Right to opt out – Consumers will be able to dictate that a company cannot sell their personal information to third parties. Keep in mind that the term “sell” may involve more than just monetary exchange.
Concerned about Meeting New Compliance Regulations?
InfoComply Provides an Easy Path to Compliance:
- Standard Business Process for addressing consumer requests
- Out of the Box workflows to address various regulation requirements.