Privacy Policy Clause: Disclosure of Personal Information Collected
(CCPA and CPRA Compliant)


Summary

This clause includes disclosures regarding personal information that a company collects from consumers in its course of business in compliance with the statutory obligations imposed by the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA). This clause includes practical guidance and drafting notes. The CCPA first imposed a statutory obligation on businesses to make specific disclosures in their privacy policies regarding personal information they collect from consumers. Cal. Civ. Code § 1798.130(a)(5). The CCPA was signed into law on June 28, 2018. Its substantive privacy requirements became effective starting January 1, 2020, and fully enforceable on July 1, 2020. On November 3, 2020, California voters approved Proposition 24, which enacted the CPRA. The CPRA amends and expands the CCPA, and goes into effect on January 1, 2023. Under the CCPA, as amended and expanded by the CPRA, a business that collects personal information about the ...