Consumer Data Privacy
Meeting the requirements of data privacy laws is essential for companies using personal data to initiate and nurture consumer relationships. At datadecisions Group, we are committed to meeting data privacy regulations as we provide data, audiences and analytics that enrich consumer interactions.
This page describes how datadecisions Group interprets and satisfies the requirements of consumer data privacy laws going into effect in 2023.
NEW CONSUMER DATA PRIVACY LAWS
datadecisions Group meets the requirements of five new laws designed to expand consumer data protections
The California Privacy Rights Act {CPRA), which amends the CCPA, effective January 1, 2023
The Virginia Consumer Data Protection Act (VDDPA),.which goes into effect on January 1, 2023
The Colorado Privacy Act (CPA), effective July 1, 2023
The Connecticut Data Privacy Act (CTDPA), effective July 1, 2023
The Utah Consumer Privacy Act (UCPA), effective December 31, 2023
EXPANDING OPT-OUT RIGHTS
The datadecisions Group data subject request form is updated to include all existing and new opt-out selections available to consumers:
“Do not sell my personal information”
“Do not share my personal information/opt-out of cross-context behavioral or targeted advertising”
“Opt-out of Profiling/Automated Decision-Making”
“Opt-out of use of my sensitive personal information”
datadecisions Group applies each selection as a full opt-out.
VIRGINIA, COLORADO, AND CONNECTICUT: OPT-IN TO PROCESSING SENSITIVE PERSONAL DATA
Virginia, Colorado, and Connecticut laws require consumer opt-in consent for processing sensitive personal data. Opt-in consent collected for survey submissions meets these requirements, and the use of the data is unchanged.
datadecisions Group does not collect consumer consent for processing sensitive personal data compiled for ethnic origin, race, religion, and language. Consequently, these elements are no longer maintained for Virginia, Colorado, and Connecticut addresses on the decisionPoints asset.
As a result, overall coverage of sensitive personal data declined by approximately 5.5%. The general impact to modeling and analytics will be minimal as sensitive personal data for the named states is small compared to the contribution of other fields in an overall model.
Additionally, ID-based data that is sourced online for contextual labels and behavioral attributes will exclude sensitive personal data.
This document is intended solely for distribution by datadecisions Group. Do not copy, distribute, or otherwise share.
EXPANDING DATA PRIVACY REQUIREMENTS IN 2023
RIGHT TO CORRECT
New laws afford consumers the right to correct personal data collected for them. Draft enforcement regulations allow for deleting data that consumers contest, providing no discriminatory impact results. Upon receipt of verified correction requests, datadecisions Group informs consumers that their correction request has been processed as a deletion.
datadecisions Group clients may receive correction requests pertaining to data from datadecisions Group. When a request relates to original data licensed from datadecisions Group, and no other provider, the client may provide the datadecisionsGroup company name to the requesting consumer, as specified by law·. datadecisions Group does not process correction requests licensees receive directly from consumers.
CALIFORNIA OPT-OUT AND DELETION PASS-ON
New obligations in California law require providing access to consumer opt-out and deletion requests received after orders of licensed personal data are fulfilled or data are disclosed. The datadecisions Group Opt-out and Deletion Service allows companies that license data to gain access to consumer opt-out and deletion requests received from consumers with California addresses, as of January 1, 2023.
EXPANDING DATA PRIVACY REQUIREMENTS IN 2023 CONSUMER APPEALS PROCESS
Consumers may appeal decisions that prevent submitted requests from being completed. datadecisions Group acts on all consumer requests and may refrain from completing requests if specific conditions apply:
The consumers’ identity cannot be verified!
The consumers’ anti-tracking browser settings interfere with request processing
Requests to appeal will be submitted using the datadecisions Group data subject request form or by calling the datadecisions Group Consumer
The datadecisions Group privacy policy and the data subject request form are updated to reflect new requirements effective January 1, 2023.