Page 4 - GDPR and US States General Privacy Laws Deskbook

4 | General Privacy Laws Deskbook: US State Laws and GDPR
11 C.F.R. § 7012. Notice at Collection of Personal Information. ..............................................................................................................................69
11 C.F.R. § 7013. Notice of Right to Opt-out of Sale/Sharing and the “Do Not Sell or Share My Personal Information” Link ................71
11 C.F.R. § 7014. Notice of Right to Limit and the “Limit the Use of My Sensitive Personal Information” Link. . ........................................72
11 C.F.R. § 7015. Alternative Opt-out Link. ..................................................................................................................................................................73
11 C.F.R. § 7016. Notice of Financial Incentive. ...........................................................................................................................................................74
Article 3. BUSINESS PRACTICES FOR HANDLING CONSUMER REQUESTS. ................................................................................................75
11 C.F.R. § 7020. Methods for Submitting Requests to Delete, Requests to Correct, and Requests to Know.............................................75
11 C.F.R. § 7021. Timelines for Responding to Requests to Delete, Requests to Correct, and Requests to Know.....................................76
11 C.F.R. § 7022. Requests to Delete. ............................................................................................................................................................................76
11 C.F.R. § 7023. Requests to Correct...........................................................................................................................................................................78
11 C.F.R. § 7024. Requests to Know. ..............................................................................................................................................................................80
11 C.F.R. § 7025. Opt-out Preference Signals..............................................................................................................................................................82
11 C.F.R. § 7026. Requests to Opt-Out of Sale/Sharing. ...........................................................................................................................................85
11 C.F.R. § 7027. Requests to Limit Use and Disclosure of Sensitive Personal Information.............................................................................86
11 C.F.R. § 7028. Requests to Opt-In After Opting-Out of the Sale or Sharing of Personal Information. ......................................................89
Article 4. SERVICE PROVIDERS, CONTRACTORS, AND THIRD PARTIES. ......................................................................................................89
11 C.F.R. § 7050. Service Providers and Contractors.................................................................................................................................................89
11 C.F.R. § 7051. Contract Requirements for Service Providers and Contractors. ..............................................................................................91
11 C.F.R. § 7052. Third Parties. ........................................................................................................................................................................................92
11 C.F.R. § 7053. Contract Requirements for Third Parties. ......................................................................................................................................92
Article 5. VERIFICATION OF REQUESTS..................................................................................................................................................................93
11 C.F.R. § 7060. General Rules Regarding Verification. ............................................................................................................................................93
11 C.F.R. § 7061. Verification for Password-Protected Accounts............................................................................................................................94
11 C.F.R. § 7062. Verification for Non-Accountholders.............................................................................................................................................95
11 C.F.R. § 7063. Authorized Agents..............................................................................................................................................................................96
Article 6. SPECIAL RULES REGARDING CONSUMERS UNDER 16 YEARS OF AGE. .....................................................................................96
11 C.F.R. § 7070. Consumer Less Than 13 Years of Age............................................................................................................................................96
11 C.F.R. § 7071. Consumers at Least 13 Years of Age and Less than 16 Years of Age. .....................................................................................97
11 C.F.R. § 7072. Notices to Consumers Less Than 16 Years of Age......................................................................................................................97
Article 7. NON-DISCRIMINATION.............................................................................................................................................................................97
11 C.F.R. § 7080. Discriminatory Practices...................................................................................................................................................................97
11 C.F.R. § 7081. Calculating the Value of Consumer Data. ......................................................................................................................................98
Article 8. TRAINING AND RECORD-KEEPING. .......................................................................................................................................................99
11 C.F.R. § 7100. Training. .................................................................................................................................................................................................99
11 C.F.R. § 7101. Record-Keeping. ..................................................................................................................................................................................99
11 C.F.R. § 7102. Requirements for Businesses Collecting Large Amounts of Personal Information. .......................................................... 100
ARTICLE 9. INVESTIGATIONS AND ENFORCEMENT . ...................................................................................................................................... 100
11 C.F.R. § 7300. Sworn Complaints Filed with the Agency.................................................................................................................................. 100
11 C.F.R. § 7301. Investigations. ................................................................................................................................................................................... 101
11 C.F.R. § 7302. Probable Cause Proceedings. ........................................................................................................................................................ 101
11 C.F.R. § 7303. Stipulated Orders. ............................................................................................................................................................................ 102
11 C.F.R. § 7304. Agency Audits. .................................................................................................................................................................................. 102
CONTENTS