Privacy Policy Requirements (1798.130(a)(5))

The duty_privacy_policy entry outlines the requirement that businesses must maintain a clear and accessible privacy policy describing the categories of personal information collected, the purposes for use, and consumer rights under California's 2018 Consumer Privacy Act and the 2020 Privacy Rights Act. The policy must be posted on the website, updated annually, and provided to consumers upon request. Non-compliance can trigger civil penalties and enforcement actions.