CCPA-1798.100-02
Prohibition
1798.100 — General Duties of Businesses that Collect Personal Information
Prohibition on collecting additional PI categories without notice
Description
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
CCPA-1798.100-01
Transparency
Inform consumers of personal information categories and purposes at collection
CCPA-1798.100-03
Transparency
Inform consumers of sensitive personal information categories and purposes
CCPA-1798.100-04
Prohibition
Prohibition on collecting additional sensitive PI categories without notice
CCPA-1798.100-05
Transparency
Disclose intended retention period or criteria
CCPA-1798.100-06
Requirement
Limit retention to reasonably necessary period
CCPA-1798.100-07
Transparency
Third-party website homepage disclosure option
CCPA-1798.100-08
Transparency
Physical location disclosure for third-party collection
CCPA-1798.100-09
Data Governance
Proportionality requirement for collection, use, retention, and sharing
CCPA-1798.100-10
Documentation
Specify limited purposes in third-party agreements
CCPA-1798.100-11
Documentation
Obligate third parties to comply with CCPA requirements
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started