CPPA warns of collecting too much data in first enforcement advisory

California flag

The California Privacy Protection Agency (CPPA) warned businesses to stop asking for excessive information from consumers who have requested to opt out of having their data collected or who are otherwise exercising their privacy rights.

Businesses shouldn’t collect, use, keep, share, or sell any more personal information from California residents or employees than is necessary, the CPPA said in its first enforcement advisory, issued Tuesday.

Enforcement advisories are designed to encourage companies to comply with the California Consumer Privacy Act (CCPA). The CPPA enforces the law and writes its new rules called for under the California Privacy Rights Act.

lock iconTHIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.