Member-only story

California Privacy Rules Updated to Target Shady Practices

Matthew.Rosenquist
2 min readOct 28, 2020

--

The California Consumer Privacy Act (CCPA) has been around since 2018, as the more protective data privacy legislation of any state, but not all businesses have been acting ethically in their compliance and respect for user privacy.

As a result, the CA Attorney General has once again updated the CCPA. This time, to thwart unscrupulous businesses who go out of their way to thwart citizens’ attempts to Opt-Out of the collection or sale of their personal information or to request their data deleted.

I have seen shady actions by companies, most of whom were in the business of acquiring and selling private data, that

  • Forced users to click through a maze of many links to find how to opt-out
  • Some tried to be sly and use misleading language, like double negatives, to confuse visitors in their options
  • Requiring citizens to (run a gauntlet of marketing messages) be bombarded with tons of marketing messages, trying to convince them to not change their privacy settings, before they could actually get to the screen to Opt-Out
  • The worst of cases actually required citizens to provide even more personal data before they could request to…

--

--

Matthew.Rosenquist
Matthew.Rosenquist

Written by Matthew.Rosenquist

CISO and cybersecurity Strategist specializing in the evolution of threats, opportunities, and risks in pursuit of optimal security

No responses yet