CCPA Compliance

What is the CCPA?

The California Consumer Privacy Act (CCPA) is the most comprehensive U.S. privacy law. It restricts how a consumer's personal information can be collected and distributed, and gives consumers clear rights over their personal information (PI). While CCPA is designed to protect California residents, its practical impact reaches across the U.S. It exists because people wanted more control over what happens to their data when they shop online, share information with third parties, or visit websites, so CCPA made regulating the sale and distribution of personal data its core focus.

What counts as personal information under CCPA?

CCPA's definition of "PI" is broader than GDPR's. It covers any data that can directly or indirectly link to, identify, characterize, relate to, or refer to a particular consumer or household. Enumerated categories include:

• Name, personal identifier, account name
• IP address, mailing address, email address
• Social Security number, passport number, driver's license number
• Geolocation data and biometric information
• Physical characteristics or description, signature, telephone number
• Education, employment, and employment history
• Insurance policy number and financial account information
• Commercial data, including products or services acquired, considered, or otherwise purchased or used
• Internet or electronic network activity, including browsing history, search history, and interaction with a website, application, or advertisement

Is Data Mappers CCPA compliant?

Data Mappers complies with CCPA guidelines. We act responsibly with data privacy and make sure our practices are followed in every market where we have customers. Our privacy management team ensures precautions are taken to prevent spam and other errors. We never compromise customer data privacy, and we take the necessary security measures to avoid breaches. We appreciate the trust our customers place in us, and we work to uphold it.

What has Data Mappers done to meet CCPA requirements?

• Invested in our security team to rigorously uphold CCPA commitments
• Followed fair data collection and selling practices
• Guaranteed each person's right to know how their data is used by our company and for marketing purposes
• Obtained consent before sending marketing emails, with an opt-out option included
• Taken prompt action when a request comes in to update or delete data
• Kept our data inventory processes current as new customer data is gathered and discarded
• Suppressed contact for customers who opt out of having their PI sold, for at least a year
• Trained staff to respond to customer inquiries about our privacy practices
• Stored all customer personal data in password-protected, encrypted format
• Monitored data continuously for breaches, and notify customers if one occurs
• Aligned our practices with other relevant standards, including GDPR

Frequently asked questions