Privacy Policy

What it requires

Businesses must provide a comprehensive privacy policy accessible online via a conspicuous 'privacy' link and through the settings menu of any mobile application. The policy must describe categories of PI collected, sources, purposes, third-party recipients, service provider and contractor categories disclosed for business purposes, and consumer rights including the right to know, delete, correct, opt-out of sale/sharing, limit sensitive PI use, opt-out of ADMT, and access ADMT logic. The policy must also state the date it was last updated.

Legal text (excerpt)

A mobile application must also include a link to the privacy policy in the application's settings menu. [...] (F) Except as set forth in section 7221, subsection (b), if the business uses ADMT as set forth in section 7200, subsection (a), the right to opt-out of ADMT. (G) If the business uses ADMT as set forth in section 7200, subsection (a), the right to access ADMT.

Primary source

Privisy checks

The following Privisy scanner checks are grounded in this citation:

• ⚡Privacy Policy Link
• ⚡Right to Know
• ⚡Right to Delete
• ⚡Right to Correct
• ⚡Non-Discrimination
• ⚡Privacy Contact / How to Submit Requests
• ⚡Privacy Policy — Request Form
• ⚡Categories of Personal Information Disclosed
• ⚡Categories of Sources
• ⚡Service Provider Disclosure
• ⚡Financial Incentive Notice