What is the CCPA?
The California Consumer Privacy Act, also referred to as CCPA, is a privacy-centric bill aimed at protecting the privacy of California consumers that will be effective on January 1, 2020. The CCPA, similar to Europe’s General Data Protection Regulation (GDPR), furthers Californians' rights to privacy by determining measures that businesses must put in place to properly manage personal information.
Is the CCPA relevant for me?
CCPA covers for-profit organizations doing business in California that collect consumers’ personal information. This pertains to companies that conduct business/generate sales in California, are registered in the state of California, and have website visitors in California. The CCPA allows California residents to opt out of the sale of their personal information
What is defined as personal data according to the CCPA?
Any information linkable to an individual consumer or a household without regard to citizenship or residency requirements.
In what cases does Opinion Stage collect personal data of users?
There are 3 cases in which you may be collecting personal information from your audience using the Opinion Stage tools:
- Personal data collected in forms - Opinion Stage offers standalone forms and forms that are integrated in different content types (e.g. polls, quizzes)that you can use for collecting data from your users. You may be using these tools to collect personal data (e.g. email, phone number, etc).
- Social profiles collected in polls - this personal data is only collected if you use the "Require a social profile for voting" feature with the poll format (by default the feature is set off).
- IP tracking in polls - IP's are tracked only in polls and only if you configure to block repeat voting using IP's (by default the feature is set off).
To stay compliant with the CCPA, you can use Opinion Stage in 2 modes:
Mode #1 - personal data IS NOT collected by Opinion Stage tools
To be sure you are not collecting data that is classified as personal based on the CCPA regulation, verify the following:
- Don't use the "Require a social profile for voting" feature in polls.
- Don't use the block repeat voting using IP blocking feature in polls.
- Don't gather personal data (e.g. email, phone, etc) using Opinion Stage forms.
If you comply with the above 3 restrictions, you are not collecting any personal data with Opinion Stage tools and therefore do not need to be concerned about the CCPA regulation.
Mode #2 - personal data IS collected by Opinion Stage tools
If you have a California audience and still want Opinion Stage to store personal information you can do that.
To stay compliant with the CCPA rules, it is required in this case to notify your audience what you will be doing with their personal data and that it will be stored on the Opinion Stage servers
So for example, if you are using a form that collects personal data (e.g. emails), you are required to have a checkbox that is unset by default, and specifies what you plan to do with their emails and notify them where they will be stored.
Opinion Stage stores data on secure AWS Amazon servers located in the US. For information on how Amazon AWS complies with CCPA, please read here: https://aws.amazon.com/compliance/gdpr-center/