Service Provider Contractual Requirements (1798.140(ag))

The entry outlines the contractual obligations that businesses must impose on service providers handling personal information, requiring written agreements that specify the purpose, limit use, and mandate security measures, and include provisions for data breach notifications and compliance with consumer rights under the California Consumer Privacy Act and California Privacy Rights Act.