By: Marc Mandel
Published: January 1, 2020
At CCPA Toll Free, we’re ringing in the new decade with a new blog, and what better topic to sound off on these pages with than the status of the CCPA’s toll-free number requirement as of January 1, 2020.
When California’s Governor signed the CCPA into law, it required all businesses to provide consumers with two or more methods for submitting privacy requests, including a toll-free telephone number.
In October of 2019, the Governor signed amendment AB-1564 to the CCPA that provides relief from the toll-free number requirement for businesses that (1) operate exclusively online and (2) have a direct relationship with the consumers from whom they collect personal information. Businesses meeting these criteria can provide an email address in lieu of a toll-free number.
On a first reading, amendment AB-1564 appears relevant for many businesses. Let’s review the two criteria to establish if your businesses qualifies:
1. Do you operate exclusively online? It is obvious that if you operate a brick-and-mortar retail store, a bank with branches or a hotel that you do not operate exclusively online. But what if you’re an “online only business” that attends trade shows, hosts events, or engages in guerrilla marketing such as handing out product samples and posting photos of the giveaway on social media? In each of these circumstances, you are likely collecting someone’s name, email or image, all of which are all personal information under the CCPA; and
2. Do you have a direct relationship with each of your consumers? If you’re strictly an offline retailer, the answer may be an obvious yes. Consumers walk into your store and transact with you directly. If you have an online component to your business, you may still have a direct relationship with your consumers. If you’re an online news publisher or an e-commerce storefront, consumers may browse your company owned and operated online properties to read your content or buy your merchandise. So far, that’s direct. However, what if you also reach consumers with whom you have no direct relationship, for example by advertising online? In a typical online marketing campaign, you advertise your goods, services or content on third party websites and you collect marketing analytics data about the consumers exposed to those ad impressions. For example, if a consumer browses nytimes.com and sees your ad, you may collect via your ad tech platforms a cookie ID, IP address or other unique identifier, all of which are personal information under the CCPA. In this example, it is the New York Times as the publisher and not you who has the direct consumer relationship. The same logic applies when you buy or exchange email marketing lists with third parties. Since an email address is personal information, you have an indirect relationship with those consumers.
The scenarios described in (1) and (2) above demonstrate the need for privacy professionals to form nuanced judgments about whether everyday activities render a company eligible to qualify for AB-1564’s toll-free number exemption. Given the ease of complying with the toll-free number requirement by using a solution like ccpatollfree.com, it makes sense for companies to follow best practices and provide their consumers with a toll free privacy hotline.
CCPA Toll Free’s solution starts at $29 per month and features:
• A free trial including access to a toll-free number provisioned instantly
• No long-term commitments, and cost savings for annual plans
• Enterprise readiness with encryption and two-factor authentication
• Access to the shared 866-I-OPT-OUT privacy hotline or a dedicated toll-free number
• Telephone voice prompts that work by default and are customizable for your brand
• A solution for Do Not Sell My Personal Information homepage links
• A secure dashboard to check telephone and web form requests, including tools to demonstrate your compliance
• Emails when you receive a request or a deadline is approaching–no remembering to log into the dashboard
For questions about the CCPA Toll Free solution, email firstname.lastname@example.org or click here to watch our videos.