About CCPA | California Rules of Service

The California Consumer Privacy Act (CCPA) is a state statute intended to enhance privacy rights and consumer protection for residents of California, United States. Enacted in 2018 and effective from January 1, 2020, the CCPA introduces new privacy rights for consumers and imposes obligations on businesses that collect personal information.

Key Elements of CCPA:

  1. Consumer Rights: Consumers (California residents) have the right to know about the personal information a business collects about them and how it is used and shared; they also have the right to delete personal information collected from them (with some exceptions); and the right to opt-out of the sale of their personal information.
  2. Business Obligations: Businesses are obliged to provide notice to consumers at or before data collection; create procedures to respond to requests from consumers to opt-out, know, and delete; respond to requests from consumers to know, delete, and opt-out within specific timeframes; and treat consumers who exercise their CCPA rights no differently from those who do not.
  3. Data Sales: CCPA introduces the concept of "selling" data. Businesses that sell consumers’ personal information to third parties need to provide a clear and accessible way for consumers to opt-out of the sale of their data.
  4. Protection Against Discrimination: Consumers cannot be discriminated against for exercising their CCPA rights. That means a business cannot provide a different level or quality of goods or services, or charge different prices, if consumers exercise their rights under the Act.
  5. Data Security: Although the CCPA does not impose specific data security requirements, it does provide for a private right of action for consumers if their non-encrypted and non-redacted personal information is subject to an unauthorized access, theft, or disclosure as a result of the business's failure to implement and maintain reasonable security procedures and practices.

Who does CCPA apply to?

The CCPA applies to any business, including any for-profit entity that collects consumers' personal data, which does business in California, and satisfies at least one of the following thresholds:

  • Has annual gross revenues in excess of $25 million;
  • Buys or sells the personal information of 50,000 or more consumers or households; or
  • Earns more than half of its annual revenue from selling consumers' personal information.

Comparison with GDPR:

The CCPA is often compared with the European Union’s General Data Protection Regulation (GDPR) as both legislations provide robust data protection for individuals. While there are many similarities between the two like the right to access personal information and the right to have information deleted, there are also several key differences such as the scope, applicability, and certain rights provided to consumers.
For a more detailed explanation and information about CCPA, visit the website of the California Attorney
General: https://oag.ca.gov/privacy/ccpa or the California Legislative Information site: https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=201720180AB375

For further guidance on how you can exercise these rights with Fufild, scroll to the bottom of the page.
What are we doing at Fufild to prepare for CCPA?
In line with the transparency principles of CCPA, we are ensuring that:

  • Information is communicated in a clear way that is understood by professionals and clients who use our services.
  • We clearly demonstrate how we collate and store personal information.
  • The personal information we hold is easily accessible should we be asked to provide evidence to processing data in compliance with CCPA.

What is Fufild’s data minimization policy?

We will only hold personal information that is necessary to provide the services found on Fufild. Any personal information that is not required will either be anonymized to make it non-personal or deleted.

How does Fufild share personal information?

Like most online businesses, Fufild has an extensive list of suppliers whose services are vital to us and with whom we may share your personal information. A comprehensive list of the categories of suppliers and third-parties we use can be found in our Privacy Policy.

How does Fufild protect personal information?

We have firewalls around the database and access to the information is protected by a combination of access controls and network layer protection. The network layer includes a combination of hardware firewalls and cloud security.

If you’d like to know more about Fufild in regards to CCPA, email us at ccpa@fufild.com.