Overview of Required Disclosures

What it requires

The map of Article 2. Every business subject to the CCPA must provide a privacy policy under § 7011. A business that controls collection owes a Notice at Collection under § 7012; one that uses ADMT for a significant decision owes a Pre-use Notice and, unless an exception applies, an ADMT opt-out link; one that sells or shares owes the Notice of Right to Opt-out of Sale/Sharing or the Alternative Opt-out Link; one that uses sensitive personal information beyond the § 7027(m) purposes owes the Notice of Right to Limit; and one that offers a financial incentive owes the Notice of Financial Incentive under § 7016.

Regulation text

(a) Every business that must comply with the CCPA and these regulations shall provide a privacy policy in accordance with the CCPA and section 7011. (b) A business that controls the collection of a consumer’s personal information from a consumer shall provide a Notice at Collection in accordance with the CCPA and section 7012. [...] (e) Except as set forth in section 7025, subsection (g), a business that sells or shares personal information shall provide a Notice of Right to Opt-out of Sale/Sharing or the Alternative Opt-out Link in accordance with the CCPA and sections 7013 and 7015. (f) A business that uses or discloses a consumer’s sensitive personal information for purposes other than those specified in section 7027, subsection (m), shall provide a Notice of Right to Limit or the Alternative Opt-out Link in accordance with the CCPA and sections 7014 and 7015. (g) A business that offers a financial incentive or price or service difference shall provide a Notice of Financial Incentive in accordance with the CCPA and section 7016.

California Consumer Privacy Act / California Privacy Rights Act, § 7010Read the full section from California Privacy Protection Agency (CalPrivacy)