Consumers’ Right to Know What Personal Information is Being Collected
Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.
What it requires
Subdivision (a) is the operative source of the right to know, and it names five things a consumer may request: the categories of personal information collected about them, the categories of sources it came from, the business or commercial purpose for collecting, selling, or sharing it, the categories of third parties it is disclosed to, and the specific pieces of personal information held about them. Section 1798.100 is a different duty — what a business must tell consumers at or before the point of collection — so a checklist item about responding to a request to know rests on this section rather than on § 1798.100. The companion § 1798.115 adds the sale- and share-specific disclosures, and 11 CCR § 7001(nn) defines “request to know” by reference to both sections together.
Legal text (excerpt)
A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following: (1) The categories of personal information it has collected about that consumer. [...] (5) The specific pieces of personal information it has collected about that consumer.
Primary source
California Privacy Protection Agency (CalPrivacy): § 1798.110: Consumers’ Right to Know What Personal Information is Being Collected ↗Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.