Businesses Must Exempt Certain Data from Deletion under the CCPA

Businesses Must Exempt Certain Data from Deletion

The Most Powerful Platform for Privacy Governance

The California Consumer Privacy Act (CCPA) provides nine exemptions to a consumer’s right to erasure. These exemptions are more than a yes or no answer. If your company qualifies for this exemption, you need to understand exactly what types of data are covered under the exemption. Any information that does not fall within the exemptions or other legal exceptions, will be subject to deletion under the CCPA.


CCPA Legal Requirement

In response to a request to delete personal information, a business must assess whether the request falls within any of the exceptions to deletion under the CCPA, such as for information necessary to complete the transaction for which the information was collected or information necessary to comply with the legal obligations.

Text of the CCPA Regulations

California Civil Code §1798.105

  1. A business or a service provider shall not be required to comply with a consumer’s request to delete the consumer’s personal information if it is necessary for the business or service provider to maintain the consumer’s personal information in order to:
    1. Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business’ ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.
    2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
    3. Debug to identify and repair errors that impair existing intended functionality.

...Read More

Clarip Product Functionality

Clarip’s custom responses and orchestration rules allow businesses to exempt certain data from the DSRs and other CCPA requirements.

Clarip’s platform and orchestration rules help businesses to exempt data from the CCPA requirements.
Contact Clarip Today for Help with CCPA Regulations
The Clarip data privacy software and team are prepared to help your organization improve its privacy practices and comply with the CCPA. Click here to contact us (response within 24 hours), schedule a demo or call 1-888-252-5653 to speak to a member of the Clarip team.

Clarip can help your organization comply with each requirement in CCPA:
Comply with Consumer Requests to Delete PII
Maintain Records of the CCPA Consumer Requests
External Vendor Communication Process
Individualized Data Subject Request Reports
Refrain from the Future Sale of PII with Consumer Requests

Contact us today for an in-depth demo!