Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance

Can I ignore consumer requests for information or deletion in California?

Under the California Consumer Privacy Act of 2018, a business cannot ignore consumer requests for information or deletion [2.1]. A business that collects personal information about consumers shall disclose the consumer's rights to request the deletion of the consumer's personal information [2.1]. If a business receives a verifiable consumer request from a consumer to delete the consumer's personal information, the business shall delete the consumer's personal information from its records, notify any service providers or contractors to delete the consumer's personal information from their records, and notify all third parties to whom the business has sold or shared the personal information to delete the consumer's personal information unless this proves impossible or involves disproportionate effort [2.1].However, a business, or a service provider or contractor acting pursuant to its contract with the business, shall not be required to comply with a consumer's request to delete the consumer's personal information if it is reasonably necessary for the business, service provider, or contractor to maintain the consumer's personal information in order to complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the consumer, or reasonably anticipated by the consumer within the context of a business' ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer [2.1].In cases where a business denies a consumer's request to delete in whole or in part, the business shall provide to the consumer a detailed explanation of the basis for the denial, including any conflict with federal or state law, exception to the CCPA, or factual basis for contending that compliance would be impossible or involve disproportionate effort, unless prohibited from doing so by law [2.1].In conclusion, a company cannot ignore consumer requests for information or deletion in California. A business must comply with a consumer's request to delete their personal information, and if a business denies a consumer's request to delete in whole or in part, the business shall provide to the consumer a detailed explanation of the basis for the denial [2.1].