CCPA

It gives consumers the right to know, delete and correct their personal information and to opt out of its sale or sharing. A business that discloses personal information to a service provider or contractor must have a contract that limits how it is used. A service provider that engages someone else to help process that information must notify the business and bind the other party to the same requirements by written contract (Civil Code 1798.140(ag)(2)), much like the GDPR’s rules on subprocessors.