Science & Technology



In 2020, Californians will have new privacy rights online. But they might have to show ID

Sam Dean, Los Angeles Times on

Published in Science & Technology News

The internet is going to look, and work, a little different starting today. That's because Californians have new rights over how their personal information is gathered, stored and sold by any company operating in the state as of Jan. 1, thanks to the California Consumer Privacy Act, or CCPA.

As businesses scramble to get in compliance with the law, you've probably seen a rash of pop-up notifications and emails about privacy policy updates. You may also have noticed the small-print "do not sell my information" buttons that have started appearing at the bottom of websites.

But what are these new rights? How can you actually exercise them? And will any of this make a difference in how you use the internet?

Three new rights are at the heart of the CCPA, the strongest consumer data privacy law in the nation: the right to know, the right to delete, and the right to opt out.

Knowing is half the battle

The right to know means that you can ask a company to produce a copy of all the personal information it has gathered on you over the years, and let you know the categories (although not the specific names) of businesses it gathered that information from or sold that information to.


This also means that companies have to notify you -- typically in their privacy policy -- which categories of personal information they collect, and let you know if they're selling it to third parties.

Hitting delete

The right to delete means that companies must delete all the information they have on you when you ask, and if they had shared your information with another company they hired to perform a service, they must tell that company to delete it, too. Companies can still keep data they deem necessary for some uses, such as completing an ongoing transaction or detecting security breaches, but by and large they're required to zero you out if you request it.

Companies subject to the law (which include most companies with websites and customers in California) have to provide at least an email address and a toll-free phone number where you can submit these requests, which you should be able to find in their privacy policies.


swipe to next page


blog comments powered by Disqus