面试题与答案

CCPA applies to businesses that collect and process personal information of California residents and meet certain criteria, such as having annual gross revenues exceeding $25 million.

Personal information is broadly defined under CCPA, while sensitive information includes specific categories like Social Security numbers and financial information.

Businesses must provide a clear and conspicuous 'Do Not Sell My Personal Information' link on their website to allow consumers to opt-out of the sale of their personal information.

CCPA defines 'sale' broadly, including any exchange of personal information for monetary or other valuable consideration.

Yes, but businesses must comply with specific requirements, such as providing clear information about the incentive and obtaining opt-in consent.

Service providers are subject to contractual obligations with businesses and are restricted from using personal information for purposes other than providing the services specified in the contract.

CCPA defines 'business purpose' as the use of personal information for the operational purposes necessary to provide a service or product requested by the consumer.

A 'verifiable consumer request' is a request made by a consumer, or a consumer's authorized agent, that a business can reasonably verify to ensure the request's legitimacy.

A privacy policy must disclose the categories of personal information collected, the purpose of collection, and information about consumer rights. It should be updated at least annually.

CCPA considers a 'household' as a person or group of people who reside at the same address and share common devices or services. Certain rights under CCPA apply to households.

Yes, under certain circumstances. Businesses can deny deletion requests if the information is necessary for completing a transaction or fulfilling the terms of a contract.

Businesses can offer financial incentives for the collection, sale, or deletion of personal information, but must provide clear information about the incentive and obtain the consumer's opt-in consent.