The California Office of the Attorney General (OAG) recently concluded that the California Consumer Privacy Act (CCPA) generally requires a covered business to disclose, upon request, its inferences about a consumer—whether generated internally or obtained from another source—unless the business can demonstrate that a statutory exception applies. In its first formal opinion (No. 20-303) under the CCPA, OGC has thus taken an expansive view of a consumer’s CCPA “right to know” the specific pieces of personal information that a business collects.
To learn more, read our client alert.