CALIFORNIA CONSUMER PRIVACY ACT
The California Consumer Privacy Act (CCPA) is a California state law that enhances privacy rights and consumer protections for California residents. The CCPA regulates what businesses can do with the personal information they collect and is considered landmark legislation on data protection because of its strict guidelines. Under the CCPA, California residents have the following rights.
- Know what personal information is being collected about them.
- Access personal information that has been collected about them.
- Request the deletion of their personal information, subject to certain restrictions.
- Prevent the sharing or sale of their personal information to third parties.
- Sue or join class-action suits against erring businesses.
- Receive equal service and price even if they exercise privacy rights.
As CCPA covers only businesses and any for-profit entities that conduct business in California, collect personal data of California residents, and satisfy at least one of the following conditions:
- Generates more than US$25 million in gross revenues
- Possesses personal information of more than 50,000 California consumers, households, or devices
- Generates more than 50% of annual revenues from selling the personal information of California residents
Bank Employee Applicability: The CCPA is also applicable to employment-related information. The purpose for which the Bank collects personal information about its own employees does not qualify as a “consumer” purpose under the Gramm-Leach-Bliley Act (“GLBA”) or California Financial Information Privacy Act (“CFIPA”). As such, employment information is not exempt from the CCPA.
The CCPA disclosure is provided to applicable customers at the time of deposit account opening, loan application, upon request and via the Bank’s website. The CCPA disclosure is provided to new employees at the time of hiring (on-boarding).