When the California Consumer Privacy Act (CCPA) enforcement period started on August 14, 2020, many companies expected that the final regulations were in place. In what turns out to be an "October Surprise" in the privacy compliance world, the California Attorney General's office released a third set of proposed modifications to the CCPA Regulations on October 12, 2020.
Highlights of these proposed modifications include:
- Offline Notice. Companies that collect data offline must provide an offline option for "opting out" of such data collection. Examples include having a paper notice to hand to consumers or posting signage that indicates how consumers can exercise their rights.
- User Friendly Opt-Out Options. Opt-out mechanisms must be consumer friendly, and the California Attorney General provided several examples, including:
- The process to opt out cannot be more difficult than an opt-in process for the sale of personal information.
- Avoid double negatives and confusing language with opt-out processes.
- Do not make consumers provide additional personal information that is not required to facilitate a consumer data request.
- Do not make consumers scroll through your entire Privacy Policy or other document when submitting an opt-out request.
- Identity Verification for Consumer Rights Requests. Companies can require an authorized agent to provide verification that they have signed permission to submit requests on behalf of the consumer.
- Notice for Consumers Ages 13-15. Companies must provide clear notice to consumers if they collect information on children 13 years and under or between the ages of 13 and 15.
Comments will be taken on these proposed modifications until Wednesday, October 28, 2020, but companies are advised to keep up-to-date on these proposed changes since they are indicative of where the California Attorney General's office is likely going to direct their focus as they evaluate potential enforcement.
©2026 Carlton Fields, P.A. Carlton Fields practices law in California through Carlton Fields, LLP. Carlton Fields publications should not be construed as legal advice on any specific facts or circumstances. The contents are intended for general information and educational purposes only, and should not be relied on as if it were advice about a particular fact situation. The distribution of this publication is not intended to create, and receipt of it does not constitute, an attorney-client relationship with Carlton Fields. This publication may not be quoted or referred to in any other publication or proceeding without the prior written consent of the firm, to be given or withheld at our discretion. To request reprint permission for any of our publications, please use our Contact Us form via the link below. The views set forth herein are the personal views of the author and do not necessarily reflect those of the firm. This site may contain hypertext links to information created and maintained by other entities. Carlton Fields does not control or guarantee the accuracy or completeness of this outside information, nor is the inclusion of a link to be intended as an endorsement of those outside sites.
