- A new California law went into effect on January 1, 2020 that gives people more control over their privacy online – as long as they know their rights.
- The law is only enforceable for California residents, but many websites are extending its provisions to all users, and it will reshape the internet for everyone.
- You can now find out more about what personal data websites are collecting and how it’s being used. You can also request that websites stop collecting your personal data.
- Visit Business Insider’s homepage for more stories.
In the weeks leading up to 2020, companies have been scrambling to comply with a sweeping new privacy law that gives people more control over how websites track and sell their personal information.
The law, called the California Consumer Privacy Act, only legally applies to California residents – but many websites are rolling out tools and privacy changes that will apply to all users. The CCPA went into effect on January 1.
Companies are now legally obligated to give California residents the opportunity to see how their personal information is being tracked, how it’s being sold, and how to opt out.
But some tech companies are already pushing back on the thrust of the law. Both Facebook and Google have argued that they’re exempt from letting users request that the companies stop selling their personal data – that’s because the companies don’t technically sell people’s personal information, but rather use that information to serve people ads that are relevant to their interests.
Here's a breakdown of the rights that the CCPA grants to California residents, and how to exercise those rights.
Under the law, sites are required to feature a link on their homepage that users can click on to request that their personal data not be sold to third parties.
Clicking the link will enable users to opt out, usually through a dialogue box like this one.
The law also requires that businesses tell users what information is being collected about them, ranging from their name and contact information to their browsing history.
This information can be found in companies' privacy policies. If you're unable to find a breakdown of information collected, contact the company directly.
The law also mandates that companies give people a more detailed breakdown of the types of third parties it shares their personal data with.
This information should also be included in companies' privacy policy. While the law requires companies to disclose the types of third parties that personal data is shared with, it doesn't mandate that they name the specific third parties.
Companies have to let people request a copy of the personal information that the company has tracked.
Many major tech companies have already rolled out tools that let users download their personal information, including Facebook and Google. If this tool is difficult to find, California residents can contact companies directly to request their personal data as guaranteed by the CCPA.
Finally, the law requires that everyone have access to the same services for the same price, even if they opt out of sharing their personal information.
Companies can't charge California residents more money if they choose to opt out of data-sharing.
While the CCPA only guarantees rights for California residents, several other states are weighing similar bills — and in the meantime, residents of other states can still request information about their data, even if companies aren't legally obligated to comply.
The International Association of Privacy Professionals has set up a tracker to gauge the progress of similar privacy bills in other states.
California privacy advocates have also set up a running list of opt-out forms for companies beholden to the CCPA.