Businesses Must Protect Sensitive Personal Information

Businesses Must Protect Consumer's Sensitive PII

The Most Powerful Platform for Privacy Governance

Under the CCPA, consumers have a right to obtain access to personal information collected about them by businesses. However, the CCPA provides that certain sensitive personal information should not be disclosed to the consumers as there is always a risk of unauthorized disclosure. Rather, businesses must inform consumers that they collect the type of information without disclosing the information itself.


CCPA Legal Requirement

In response to a request to know specific personal information, your business must not disclose certain sensitive information to the consumer.

Text of the CCPA Regulations

Second Modified Proposed CCPA Regs. §999.313(c)(4)

request to know a consumer’s Social Security number, driver’s license number or other government-issued identification number, financial account number, any health insurance or medical identification number, an account password, security questions and answers, or unique biometric data generated from measurements or technical analysis of human characteristics. The business shall, however, inform the consumer with sufficient particularity that it has collected the type of information. For example, a business shall respond that it collects “unique biometric data including a fingerprint scan” without disclosing the actual fingerprint scan data.

...Read More

Clarip Product Functionality

Clarip’s platform has built-in scan redaction rules that will redact sensitive data, as required by the regulations.

Clarip’s scan redaction omits sensitive information from the DSR report to protect data from potential authorized disclosure.
Contact Clarip Today for Help with CCPA Regulations
The Clarip data privacy software and team are prepared to help your organization improve its privacy practices and comply with the CCPA. Click here to contact us (response within 24 hours), schedule a demo or call 1-888-252-5653 to speak to a member of the Clarip team.

Clarip can help your organization comply with each requirement in CCPA:
Use Reasonable Security Measures When Transmitting PII
Businesses Must Exempt Certain Data from Deletion
Comply with Consumer Requests to Delete PII
Maintain Records of the CCPA Consumer Requests
External Vendor Communication Process

Contact us today for an in-depth demo!