1. (a) When a consumer uses an authorized agent to submit a request to delete, request to correct, or a request to know, a business may require the authorized agent to provide proof that the consumer gave the agent signed permission to submit the request. The business may also require the consumer to do either of the following:

   1. (1) Verify their own identity directly with the business.

   2. (2) Directly confirm with the business that they provided the authorized agent permission to submit the request.

      However, businesses shall not require the consumer to resubmit their request in their individual capacity.

2. (b) Subsection (a) does not apply when a consumer has provided the authorized agent with power of attorney pursuant to Probate Code sections 4121 to 4130. A business shall not require power of attorney in order for a consumer to use an authorized agent to act on their behalf.
3. (c) An authorized agent shall implement and maintain reasonable security procedures and practices to protect the consumer's information.
4. (d) An authorized agent shall not use a consumer's personal information, or any information collected from or about the consumer, for any purposes other than to fulfill the consumer's requests, verification, or fraud prevention.

Note: Authority cited: Section 1798.185, Civil Code. Reference: Sections 1798.100, 1798.105, 1798.106, 1798.110, 1798.115, 1798.130 and 1798.185, Civil Code.

History

1. Change without regulatory effect renumbering section 999.326 to new section 7063 filed 5-5-2022 pursuant to section 100, title 1, California Code of Regulations (Register 2022, No. 18).

2. Amendment of section heading, section and Note filed 3-29-2023; operative 3-29-2023 pursuant to Government Code section 11343.4(b)(3) (Register 2023, No. 13).

3. Amendment of subsection (a)(2) filed 9-22-2025; operative 1-1-2026 (Register 2025, No. 39).