Authorized Agents

What it requires

When a consumer uses an authorized agent to submit a request to delete, correct, or know, the business may require proof that the consumer gave the agent signed permission, and may also ask the consumer to verify their own identity or confirm the permission directly, but may not make the consumer resubmit the request themselves. None of that applies when the agent holds a power of attorney under the Probate Code, and a business may not demand a power of attorney as the price of using an agent. Agents must protect the consumer’s information and use it only to fulfill the request, verification, or fraud prevention.

Regulation text

(a) When a consumer uses an authorized agent to submit a request to delete, request to correct, or a request to know, a business may require the authorized agent to provide proof that the consumer gave the agent signed permission to submit the request. The business may also require the consumer to do either of the following: (1) Verify their own identity directly with the business. (2) Directly confirm with the business that they provided the authorized agent permission to submit the request. However, businesses shall not require the consumer to resubmit their request in their individual capacity. (b) Subsection (a) does not apply when a consumer has provided the authorized agent with power of attorney pursuant to Probate Code sections 4121 to 4130. A business shall not require power of attorney in order for a consumer to use an authorized agent to act on their behalf.

California Consumer Privacy Act / California Privacy Rights Act, § 7063Read the full section from California Privacy Protection Agency (CalPrivacy)