Consumers’ Right to Know What Personal Information is Being Collected. Right to Access Personal Information

What it requires

Subdivision (a) is the operative source of the right to know, and it names five things a consumer may request: the categories of personal information collected about them, the categories of sources it came from, the business or commercial purpose for collecting, selling, or sharing it, the categories of third parties it is disclosed to, and the specific pieces of personal information held about them. Section 1798.100 is a different duty (what a business must tell consumers at or before the point of collection), so a checklist item about responding to a request to know rests on this section rather than on § 1798.100. The companion § 1798.115 adds the sale- and share-specific disclosures, and 11 CCR § 7001(nn) defines “request to know” by reference to both sections together.

Statute text

A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following: (1) The categories of personal information it has collected about that consumer. [...] (5) The specific pieces of personal information it has collected about that consumer.

California Consumer Privacy Act / California Privacy Rights Act, § 1798.110Read the full section from California Privacy Protection Agency (CalPrivacy)

How Privisy tests it