CIPP/US: Certified Information Privacy Professional/United StatesDemo

Question

Under the California Privacy Rights Act (CPRA), in which circumstance is a service provider exempt from deleting children’s data stored at a business’s request?

A The data is secured by adhering to certified industry codes
B The data is necessary to prevent or respond to security incidents
C The data is necessary to comply with a civil inquiry by local authorities
D The data is necessary to provide the service under a consumer s informed consent

Explanation

Under the CCPA as amended by the CPRA (Cal. Civ. Code Section 1798.105(d)), both businesses and their service providers/contractors are relieved of the obligation to delete a consumer's -- including a minor's -- personal information when retaining it is necessary to detect security incidents or protect against malicious, deceptive, fraudulent, or illegal activity, which is one of the enumerated statutory exceptions to the right to delete and applies regardless of the data subject's age.

CIPP/US: Certified Information Privacy Professional/United StatesDemo

AstroTutor

Notes

Readiness

QuestionQ219

Community Discussion