Information Collection Notice

The following notice is required by California law under the Information Practices Act of 1977 (Civil Code § 1798.17).

The California Privacy Protection Agency requests information in the identified forms, which will be used and/or disclosed for the following purposes.

  • Complaint Form (Enforcement Division). Information received will be used to broadly monitor industry compliance or to inform an enforcement action. Personal information provided may be used and disclosed to investigate and enforce the CCPA, including in an administrative or judicial proceeding.

  • Rulemaking Comments Form (Legal Division). Comments are received in compliance with the Administrative Procedure Act (Gov. Code § 11340, et seq.). Personal information provided will be part of a public record and may be disclosed in response to a Public Records Act request.

  • Data Broker Registry (Legal Division). Information is received in compliance with Civ. Code § 1798.99.80, et seq., and will be accessible to the public through a website. The information may also be used and disclosed to investigate and enforce Civ. Code § 1798.99.80, et seq. and the CCPA (Civ. Code § 1798.100, et seq.).

  • Registration for Meetings (Public & External Affairs, Legal Division). Information received will be used for meeting planning purposes (e.g., obtaining appropriate size of room, accommodating those with disabilities, etc.). It may also be used to inform you of upcoming rulemaking activities. Personal information provided will be part of a public record and may be disclosed in response to a Public Records Act request.

  • Contact Us Form (Public & External Affairs, Legal Division). Information received will be used and shared, as necessary, to address your inquiry. For example, if it is a public records act request, it will be used to respond to your request. If a media or human resources inquiry, it may be used to provide you requested materials or direct you to relevant resources. Personal information provided will be part of a public record and may be disclosed in response to a Public Records Act request.

All information you provide is voluntary, except for some information within the Data Broker Registry form that is required under law. Failure to provide that information may result in administrative fines and costs. Separately, failure to provide contact information in connection with the other forms may impact our ability to address the purpose of your inquiry. For example, we will not be able to inform you regarding future rulemaking activities, communicate with you regarding reasonable accommodations for meetings, or ask for additional information about your complaint.

The information you provide is maintained by the California Privacy Protection Agency pursuant to one or more of the following laws:

You have the right to access records containing your personal information. The office responsible for maintaining information gathered by the California Privacy Protection Agency is:

CPPA Privacy Officer
California Privacy Protection Agency
2101 Arena Boulevard
Sacramento, CA 95834
(916) 572-2900

For more information, go to https://privacy.ca.gov/privacy-policy/.