Requirements for Disclosures and Communications to Consumers

What it requires

Every disclosure and communication to consumers must be easy to read and understand, in plain language without technical or legal jargon. The notices Article 2 requires must also be readable on smaller screens, offered in the languages the business ordinarily uses with California consumers, and reasonably accessible to consumers with disabilities, following WCAG 2.1 for notices given online. Subsection (c) sets the test for a conspicuous link on a website: it must appear in a similar manner as the other links the business posts, at least the approximate font size and color of the links next to it. Subsection (d) covers mobile apps, where the privacy policy must be reachable from the platform or download page and from inside the app, such as its settings menu.

Regulation text

(a) Disclosures and communications to consumers shall be easy to read and understandable to consumers. For example, they shall use plain, straightforward language and avoid technical or legal jargon. (b) Disclosures required under Article 2 shall also: (1) Use a format that makes the disclosure readable, including on smaller screens, if applicable. [...] (c) For websites, a conspicuous link required under the CCPA or these regulations shall appear in a similar manner as other similarly-posted links used by the business on its homepage(s). For example, the business shall use a font size and color that is at least the approximate size or color as other links next to it that are used by the business on any internet webpage where personal information is collected. (d) For mobile applications, a conspicuous link shall be included in the business’s privacy policy, which must be accessible through the mobile application’s platform page or download page. It must also be accessible through a link within the application, such as through the application’s settings menu.

California Consumer Privacy Act / California Privacy Rights Act, § 7003Read the full section from California Privacy Protection Agency (CalPrivacy)

How Privisy tests it