Restricting the Use of Sensitive Personal Information This new right gives consumers the ability to instruct companies that collect SPI at any time to limit the use of the consumer's information to only those that are necessary to perform the services or provide the goods purchased by the consumer. You may notice that some of the requirements depend on the context of the website, for example, if it does not collect sensitive data, it does not need to stop the use of sensitive data.
That said, to comply with the CPRA changes, marketers saudi arabia mobile database need to give customers the ability to: Understand what data is being collected and its purpose; The ability to opt out of automatically captured data; Provide a way for customers to request copies, updates, and deletions of their data. If you make automated decisions based on SPI, your users need to be able to know what data is being used and opt out of such decisions; your website must have a "Do Not Sell My Personal Information" link that users can use to opt out.
Third-party data sales. If your website users include minors under the age of 16, you will need to obtain their opt-in (consent) before selling or disclosing their personal information to third parties. Consumers under the age of 13 must expressly authorize the sale of their personal information. If an operator deliberately ignores the age of a consumer, it shall be deemed to have actual knowledge of the age of the consumer.
What do marketers need to do to comply?
-
- Posts: 103
- Joined: Tue Dec 03, 2024 3:42 am