State Laws
Many state laws further augment federal constitutional and statutory protections, particularly in the area of privacy. California has been on the forefront in crafting legislation that safeguards privacy rights, and its legislation has often been a model for other states to follow.
-
Privacy Policies: The California Online Privacy Protection Act (OPPA) requires that all California companies operating a commercial Web site post a conspicuous privacy policy on their site and disclose the kinds of personally identifiable data that they collect and share with third parties. Companies must also clearly label their privacy statements, abide by their policies, inform consumers of processes to opt out of data sharing, and publish a date the policy goes into effect.
-
Notice and Consent: California law also empowers consumers to learn how their personal information is shared by companies and encourages companies to adopt simple methods for individuals to opt out of information sharing.
-
Data Breach Reporting: California law, as well as that of 42 other states, requires companies to notify individuals in the event that their information is lost or stolen as a result of a data breach.
-
Data Use Restrictions: California law prohibits publicly posting or displaying Social Security numbers or embedding them on a card and swiping drivers' licenses or recording driver's license information except for very limited circumstances, such as age verification or fraud control.
