Page 22 - GDPR and US States General Privacy Laws Deskbook

(3)  Debug to identify and repair errors that impair existing intended functionality.
(4)  Exercise free speech, ensure the right of another consumer to exercise that consumer’s right of free speech, or exercise
another right provided for by law.
(5)  Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section
1546) of Title 12 of Part 2 of the Penal Code.
(6)  Engage in public or peer-reviewed scientific, historical, or statistical research that conforms or adheres to all other
applicable ethics and privacy laws, when the business’ deletion of the information is likely to render impossible or
seriously impair the ability to complete such research, if the consumer has provided informed consent.
(7)  To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s
relationship with the business and compatible with the context in which the consumer provided the information.
(8) Comply with a legal obligation.
1798.106 Consumers’ Right to Correct Inaccurate Personal Information
(a)  A consumer shall have the right to request a business that maintains inaccurate personal information about the consumer to
correct that inaccurate personal information, taking into account the nature of the personal information and the purposes
of the processing of the personal information.
(b)  A business that collects personal information about consumers shall disclose, pursuant to Section 1798.130, the consumer’s
right to request correction of inaccurate personal information.
(c)  A business that receives a verifiable consumer request to correct inaccurate personal information shall use commercially
reasonable efforts to correct the inaccurate personal information as directed by the consumer, pursuant to Section
1798.130 and regulations adopted pursuant to paragraph (8) of subdivision (a) of Section 1798.185.
(Added November 3, 2020, by initiative Proposition 24, Sec. 6. Effective December 16, 2020. Operative January 1, 2023, pursuant
to Sec. 31 of Proposition 24.)
1798.110 Consumers’ Right to Know What Personal Information is Being Collected. Right to
Access Personal Information
(a)  A consumer shall have the right to request that a business that collects personal information about the consumer disclose
to the consumer the following:
(1)  The categories of personal information it has collected about that consumer.
(2) The categories of sources from which the personal information is collected.
(3) The business or commercial purpose for collecting, selling, or sharing personal information.
(4) The categories of third parties to whom the business discloses personal information.
(5) The specific pieces of personal information it has collected about that consumer.
(b)  A business that collects personal information about a consumer shall disclose to the consumer, pursuant to subparagraph
(B) of paragraph (3) of subdivision (a) of Section 1798.130, the information specified in subdivision (a) upon receipt of
a verifiable consumer request from the consumer, provided that a business shall be deemed to be in compliance with
paragraphs (1) to (4), inclusive, of subdivision (a) to the extent that the categories of information and the business or
California Consumer Privacy Act of 2018 (as amended by the
22 | 
California Privacy Rights Act of 2020) and Related Regulations