Hello everyone. I have a question regarding CCPA and business accounts. I am getting conflicting information from our regulator and our league. Our regulator says that we have to provide a privacy notice to our business customers and our consumer customers as well as an option to opt out. Our league says that we only have to provide to consumer accounts and only if there has been a change to what we share. We do 90% of our business with business accounts and in addition, we only have about 2,000 customers so I am confident that the CCPA doesn't even apply to us because we fall under the 50,000 devices and households limit in the reg. Any advice?

This is specific to CA. You may want to repost to that forum.

But to answer your question, CCPA most certainly applies to business accounts if the institutions is COVERED. For example, it applies to authorized signers and guarantors on loans. It applies to CA residents if you are collecting information about them. Your Notice at Collection should provide examples of why you are collecting information.

If you do not believe your institution is covered, then it would be worth revisiting this. As with any regulation or law, the first step is to determine if it applies to the institution.

Hi valp

Here is a link to previous discussions on CCPA. There is a three prong test to determine if you need to comply with the CCPA: $25 million in revenue, 50,000 residents/devices in CA, or you sell your CA consumer PI. If you say yes to any of the three, you qualify for CCPA.

If you have any questions send me a message.

https://www.bankersonline.com/forum...0/new-california-privacy-law#Post2183670

Thanks!

Thank you! I'm pretty new to this forum, so when you say send me a message if I have further questions, do you mean to click on that hyperlink and ask my question in the other forum?

To send a private message to another user. click on the hyperlink of that user's name and select "private message" from the drop down menu.