Your company, an online store selling digital keys to video games, has received a data access request from an individual. Specifically, the individual wants access to her recent purchase history, as s

Question

Options

• ATake a photo of herself with her driver license
• BProvide a notarized affidavit signed by two witnesses.
• CLog in to her password-protected account with the company
• DPhone the company and provide her contact details and credit card number

• A
  6% (1)
• B
  6% (1)
• C
  69% (11)
• D
  19% (3)

Explanation

Under the California Consumer Privacy Act (CCPA), businesses must verify the identity of individuals making data access requests to ensure the security of personal information. The most secure and straightforward way to verify a consumer's identity is by requiring the individual to log in to their password-protected account, as this demonstrates that the requester is the account owner. Why Password-Protected Accounts Are Best for Verification: Account-Based Relationship: If the consumer has a password-protected account with the business, verification can typically be achieved by having the consumer log in to the account. This is considered a sufficient method of verifying identity under CCPA guidelines. Minimizing Risk: Verifying identity through account login reduces the risk of fraudulent access to personal information, as only the account owner has access to the login credentials.

No community discussion yet for this question.