Privacy Policy Clause: Notice of the Right to Limit the Use of Sensitive Personal Information
(CCPA/CPRA Compliant)
Summary
This clause provides consumers with notice of their right to limit the use of their sensitive personal information as required by California Privacy Rights Act of 2020 (CPRA) amendments to the California Consumer Privacy Act of 2018 (CCPA). This clause includes practical guidance and drafting notes. Under the CCPA/CPRA, businesses have a statutory obligation to include a notice in their privacy policies that consumers' sensitive personal information may be used or disclosed to a service provider or contractor for additional, specified purposes beyond those explicitly enumerated by the CCPA/CPRA, and that consumers have the right to limit the use or disclosure of their sensitive personal information. Cal. Civ. Code §1798.121(a) and Cal. Civ. Code §1798.135(c)(2). This clause includes the definition of sensitive personal information, the consequences of exercising the right to limit the use or disclosure of sensitive personal information, and how to exercise such right. For a full listing of related California consumer privacy content, see California Consumer Privacy Resource Kit (CCPA and CPRA). For a full listing of related data security & privacy content for first-year associates, see First-Year Associate Resource Kit: Data Security and Privacy. For more information on the requirements of the CCPA/CPRA see Consumer Data Privacy (CA) and California Consumer Privacy Compliance (CCPA and CPRA). For more information on the right to limit the use of sensitive information, see CCPA/CPRA Compliance: Consumer Right to Opt-Out of the Sale or Sharing of Personal Information and Limit the Use or Disclosure of Sensitive Personal Information Checklist.