On Dec. 10, the California Office of the Attorney General issued its Fourth Set of Proposed Modifications to the California Consumer Privacy Act regulations. The changes affect only two subsections relating to the sale of personal information.
Section 999.306(b)(3) would clarify that a business that operates offline and sells consumers’ personal information must provide a notice of opt-out. This is a sensible proposal since the current rule applies the requirement to businesses that “collect” rather than “sell” personal information.
Section 999.306(f) would reinstitute guidance on the use of a uniform opt-out button consumers may use to opt-out of the sale of their personal information. Similar guidance was contained in the first set of proposed modifications but was omitted in second and third sets and in the final rule.
The deadline for written comments on the proposed modifications is Dec. 28, 2020