Consumers’ Right to Limit Use and Disclosure of Sensitive Personal Information
Audited by Privisy — The Privisy scanner actively tests for compliance with this requirement.
What it requires
CPRA added a consumer right to limit how businesses use or disclose sensitive personal information (health, financial, biometric, precise geolocation, etc.) to uses necessary to perform services or provide goods reasonably expected by an average consumer. Businesses using sensitive PI for other purposes must notify consumers and provide a mechanism to limit such use.
Legal text (excerpt)
A consumer shall have the right, at any time, to direct a business that collects sensitive personal information about the consumer to limit its use of the consumer's sensitive personal information to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services.
Primary source
📄California Privacy Protection Agency (CPPA) — § 1798.121: Consumers’ Right to Limit Use and Disclosure of Sensitive Personal Information ↗Privisy checks
The following Privisy scanner checks are grounded in this citation:
- ⚡Limit Use of Sensitive Personal Information Link
- ⚡Right to Limit Sensitive PI
Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change — verify against the authoritative source and consult a licensed attorney for compliance guidance.