CIPP/US: Certified Information Privacy Professional/United StatesDemo

By IAPP · Question Mode

QuestionQ167

State Privacy Laws

If MedApps receives a CCPA access request from a California-based app user, how should it respond?

  • A MedApps should immediately begin deleting the user’s data.
  • B MedApps should provide the privacy notice in an easily readable format.
  • C MedApps should decline the request because MedApps is not based in California.
  • D MedApps should promptly forward the request to Miraculous for instructions on handling.
Explanation

For personal information processed on Miraculous’s behalf, MedApps is a CCPA service provider. A service provider is not required to fulfill an access request submitted directly by a consumer; the business responds to the request, while the service provider assists the business with information in its possession. MedApps should therefore promptly send the request to Miraculous for handling instructions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!