1. (a) A data broker must provide only true and correct responses when submitting the registration information required by Civil Code section 1798.99.82 and this Chapter.
2. (b) All website links and email addresses provided in the registration must be accurate and functioning.
3. (c) In addition to the information required by Civil Code section 1798.99.82, a data broker must confirm at the time of registration that the information provided pursuant to section 7610(a)(2) in its DROP account is correct or update the entries with correct information.

4. (d) When reporting the extent to which the data broker is regulated by the other laws described in Civil Code section 1798.99.82(b)(2)(H), a data broker must describe:

   1. (1) The types of personal information the data broker collects and sells that are subject to the enumerated laws;
   2. (2) The specific product(s) or services covered by the enumerated state or federal law;
   3. (3) The approximate proportion(s) of data collected and sold that is subject to the enumerated laws in comparison with its total annual data collection and sales (i.e., percentage of its general data broker activities).

Note: Authority cited: Section 1798.99.87, Civil Code. Reference: Sections 1798.99.80, 1798.99.82 and 1798.99.86, Civil Code.

History

1. New section filed 12-26-2024; operative 12-26-2024 pursuant to Government Code section 11343.4(b)(3) (Register 2024, No. 52).

2. Amendment of subsections (a), (c) and (d)(3) and amendment of Note filed 11-6-2025; operative 1-1-2026 (Register 2025, No. 45).