California Shine the Light

A California law (Civil Code Section 1798.83) that gives California residents the right to request information about personal information a business has shared with third parties for their direct marketing purposes during the previous calendar year. Enacted in 2003, this law predates CCPA and still applies to businesses that share customer data with third parties for marketing. Once per year, California residents can request a list of categories of personal information disclosed and the names and addresses of third parties who received the information. Businesses must respond within 30 days. Alternatively, businesses can provide an opt-out mechanism allowing customers to prevent such sharing—if you offer this and notify customers, you're exempt from responding to individual requests. Shine the Light complements newer privacy laws and demonstrates California's long history of privacy protection leadership.