CCPA som noder
Varje objekt har egen adress, version och hash. Grafversion 2026-10-10.2. Source: NovaCopilot.
Krav (17)
- Notice at collection: categories, purposes, sale or sharing
- Notice at collection: sensitive personal information
- Retention period per category
- Third parties controlling collection
- Data minimisation and purpose limitation
- Contracts with third parties, service providers and contractors
- Reasonable security procedures
- Right to request deletion
- Disclose the right to delete
- Delete and notify service providers, contractors and third parties
- Confidential record of deletion requests
- Service providers and contractors cooperate
- Exceptions to deletion
- Right to opt out of sale or sharing
- Notice of sale or sharing and the right to opt out
- Opt-in for consumers under 16
- Stop selling or sharing after opt-out
Kontroll (14)
- Documented deletion exceptions
- Deletion propagated to vendors and third parties
- Deletion request intake and verification
- Global Privacy Control honoured
- Age signals and opt-in for under 16
- Notice at collection
- "Do Not Sell or Share" link and notice
- Opt-out passed to ad tech and third parties
- Purpose and compatibility register
- Retention schedule per category
- Reasonable security program
- Confidential suppression list
- Tracking technology inventory
- CCPA contract terms with vendors