CCPA-1798.100-12
Documentation
1798.100 — General Duties of Businesses that Collect Personal Information
Grant rights to ensure compliant use by third parties
Description
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
CCPA-1798.100-01
Transparency
Inform consumers of personal information categories and purposes at collection
CCPA-1798.100-02
Prohibition
Prohibition on collecting additional PI categories without notice
CCPA-1798.100-03
Transparency
Inform consumers of sensitive personal information categories and purposes
CCPA-1798.100-04
Prohibition
Prohibition on collecting additional sensitive PI categories without notice
CCPA-1798.100-05
Transparency
Disclose intended retention period or criteria
CCPA-1798.100-06
Requirement
Limit retention to reasonably necessary period
CCPA-1798.100-07
Transparency
Third-party website homepage disclosure option
CCPA-1798.100-08
Transparency
Physical location disclosure for third-party collection
CCPA-1798.100-09
Data Governance
Proportionality requirement for collection, use, retention, and sharing
CCPA-1798.100-10
Documentation
Specify limited purposes in third-party agreements
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started