News for hackers. Stuff that matters.

A comment on Comparison of California Consumer Privacy Act (CCPA) and GDPR [pdf]. Parent comment

Re:Comparison of California Consumer Privacy Act (CCPA) and ... by x0x0 on Wednesday November 13, 2019 @03:14PM (#21528960)
BounceX probably counts as a data sale, and CCPA allows you to restrict data sales via a required link labeled "Do Not Sell My Personal Information" (hereafter DNSMPI) that must be present on the home page and on pages where PI is collected.

It remains to be seen how many companies comply, but the law certainly does have some restrictions.

Furthermore, there is a CCPAv2 in progress for a proposition on the next ballot.

[ Parent | on HN ]
Re:Comparison of California Consumer Privacy Act (CCPA) and ... by ed on Wednesday November 13, 2019 @03:39PM (#21529266)
I am sure I can opt out of BounceX if I know BounceX exists.

But am I really supposed to fill out a DNSMPI form every time I interact with any business? How many new businesses do you think you interact with on a given day? I suspect it is a lot.

Opting out is an unreasonable burden and there's a reason why almost no one does it. And yet we know consumers want privacy, so there is clearly a larger structural problem here.

We already know the solution! Make data collection opt-in.

[ Parent | on HN ]
Re:Comparison of California Consumer Privacy Act (CCPA) and ... by x0x0 on Wednesday November 13, 2019 @04:07PM (#21529571)
You can fill out DNSMPI once for a business and it applies for at minimum the next 365 days. You do not need to specifically enumerate systems; it is a blanket prohibition.
[ Parent | on HN ]
Re:Comparison of California Consumer Privacy Act (CCPA) and ... by ed on Wednesday November 13, 2019 @04:19PM (#21529701)
Right, once per business per year. Just remember to go back and renew next year!
[ Parent | on HN ]
Re:Comparison of California Consumer Privacy Act (CCPA) and ... by x0x0 on Wednesday November 13, 2019 @05:51PM (#21530610)
And perhaps reconsider doing business with companies whose business practices you find objectionable
[ Parent | on HN ]