QuestionQ232
State Privacy LawsYour company intends to obtain from a third-party AdTech company a marketing list containing consumers’ personal information—including names, emails, and IP addresses. The AdTech company has masked and tokenized the personal information in that list.
Under which of the following circumstances would obtaining the data from the AdTech company not be treated as a sale of personal information under the California Privacy Rights Act?
- A If masked and tokenized data elements are not considered personal information in the statute's definition of the term sale
- B If the purchase agreement terms state that the transfer of the personal information to your company is not a sale
- C If the data is transferred in connection with your company's acquisition of the AdTech company
- D If the data is not shared electronically
Community Discussion