nerdexam
IAPP

CIPP-US · Question #68

Sarah lives in San Francisco, California. Based on a dramatic increase in unsolicited commercial emails, Sarah believes that a major social media platform with over 50 million users has collected a lo

The correct answer is C. The California Consumer Privacy Act entitles Sarah to request deletion of her personal. The correct answer is C because the California Consumer Privacy Act (CCPA) is a state privacy law that grants California residents the right to request the deletion of their personal information that a business has collected from them. The CCPA applies to any business that collec

State Privacy Laws

Question

Sarah lives in San Francisco, California. Based on a dramatic increase in unsolicited commercial emails, Sarah believes that a major social media platform with over 50 million users has collected a lot of personal information about her. The company that runs the platform is based in New York and France. Why is Sarah entitled to ask the social media platform to delete the personal information they have collected about her?

Options

  • AAny company with a presence in Europe must comply with the General Data Protection
  • BUnder Section 5 of the FTC Act, the Federal Trade Commission has held that refusing to delete
  • CThe California Consumer Privacy Act entitles Sarah to request deletion of her personal
  • DThe New York "Stop Hacks and Improve Electronic Data Security" (SHIELD) Act requires that

How the community answered

(23 responses)
  • A
    9% (2)
  • B
    13% (3)
  • C
    74% (17)
  • D
    4% (1)

Explanation

The correct answer is C because the California Consumer Privacy Act (CCPA) is a state privacy law that grants California residents the right to request the deletion of their personal information that a business has collected from them. The CCPA applies to any business that collects personal information from California residents, regardless of where the business is located, as long as the business meets certain thresholds of revenue, data volume, or data sharing. Therefore, the social media platform that Sarah uses is subject to the CCPA and must honor Sarah's deletion request, unless an exception applies. The CCPA also requires businesses to provide notice and choice to consumers about their data collection and use practices, and to respond to consumer requests within 45 days.

Topics

#CCPA#right to deletion#consumer rights#California

Community Discussion

No community discussion yet for this question.

Full CIPP-US Practice