Categories of Sources

Definition

Classifications of where personal information originates, such as directly from consumers, from service providers, from public records, from data brokers, from social media, or from affiliated companies. Disclosing categories of sources helps individuals understand how their information enters your systems—particularly important when you obtain data from sources other than the individual themselves. Common source categories include: direct collection through websites or apps, business transactions, customer service interactions, third-party data providers, marketing partners, public databases, social media platforms, affiliated entities, and inferences derived from other information. CCPA requires businesses to disclose categories of sources from which personal information is collected. This transparency helps consumers understand whether you're purchasing data about them, collecting it from public records, inferring it from their behavior, or obtaining it only through direct interactions.

Applicable Laws & Regulations

  1. 1CCPA Section 1798.100(b) - Disclosure of sources at or before collection
  2. 2CCPA Section 1798.110(c)(2) - Categories of sources in response to requests
  3. 3GDPR Article 14 - Information requirements when data not obtained from data subject

Ready to Get Compliant?

Generate legally compliant privacy documentation tailored to your business in minutes. Our AI-powered platform handles GDPR, CCPA, and more.

Get Started Now