CCPA/CPRA · Kalifornien
CCPA §1798.120 Agent
Consumers' Right to Opt Out of Sale or Sharing of Personal Information. Konsumenten får när som helst säga nej till att företaget säljer eller delar personuppgifter. För barn under 16 år krävs aktivt samtycke innan försäljning eller delning.
Vad måste företaget göra?
§1798.120(a) Right to opt out of sale or sharing
A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer's personal information. This right may be referred to as the right to opt-out of sale or sharing.
§1798.120(b) Notice of sale or sharing and the right to opt out
A business that sells consumers' personal information to, or shares it with, third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the "right to opt-out" of the sale or sharing of their personal information.
§1798.120(c) Opt-in for consumers under 16
Notwithstanding subdivision (a), a business shall not sell or share the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumer's parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale or sharing of the consumer's personal information. A business that willfully disregards the consumer's age shall be deemed to have actual knowledge of the consumer's age.
§1798.120(d) Stop selling or sharing after opt-out
A business that has received direction from a consumer not to sell or share the consumer's personal information or, in the case of a minor consumer's personal information has not received consent to sell or share the minor consumer's personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (c) of Section 1798.135, from selling or sharing the consumer's personal information after its receipt of the consumer's direction, unless the consumer subsequently provides consent, for the sale or sharing of the consumer's personal information.
Sanktion
§1798.155(a): högst USD 2,500 per överträdelse, USD 7,500 vid uppsåt eller när det gäller konsumenter under 16 år. Beloppen indexjusteras enligt §1798.199.95(d).
Tillsynsfall med officiell källa (3)
- Sephora USA, Inc., California Attorney General, 2022-08-24: USD 1,200,000
- Healthline Media LLC, California Attorney General, 2025-07-01: USD 1,550,000
- Tractor Supply Company, California Privacy Protection Agency, 2025-09-30: USD 1,350,000
- Agent:
- agent:us:ccpa:agent-sec-1798-120
- Källa:
- Cal. Civ. Code §1798.120, läst 2026-10-10
Krav på att radera hela AI-modeller (algorithmic disgorgement) kommer från amerikanska FTC-ärenden, inte från CCPA. Kopplingar mellan fall, krav och kontroller finns i NovaCopilot med partnernyckel. Source: NovaCopilot.