{"id":17687,"date":"2019-12-17T10:30:40","date_gmt":"2019-12-17T17:30:40","guid":{"rendered":"https:\/\/www.fullcontact.com\/?p=17687"},"modified":"2023-01-11T08:55:19","modified_gmt":"2023-01-11T15:55:19","slug":"how-fullcontact-prepared-for-ccpa","status":"publish","type":"post","link":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/","title":{"rendered":"How FullContact Prepared for CCPA"},"content":{"rendered":"

With the California Consumer Privacy Act<\/a> (CCPA) going into effect at the start of next year, FullContact has been preparing for the developments to come.<\/p>\n

We provide brands with the ability to have the most relevant interactions with customers, prospects, and the public based on identity — so the end goals of CCPA are in line with how we view information and how it can be best used to create people-focused experiences. Our foundational belief is that people should come first. This is at odds with how some in our space use identity resolution, but this is our approach, which means we didn\u2019t have to make many changes to comply with CCPA.<\/p>\n

Like all companies that fall under the rules laid out in CCPA, we needed to evaluate what the legislation says and assess how it affects our business, our processes, our technology, and most importantly, our customers.<\/p>\n

We thought it would be worth sharing our readiness plan to help guide the thinking of our customers and partners, as well as provide assurance that we\u2019re ready for CCPA and future legislation.<\/p>\n

Below are the steps we took and the decisions we made along the way:<\/p>\n

Understand the CCPA law.<\/h2>\n

We read the law. We read it again. And you know what, we read it One. More. Time. We read both the legislation itself and the Attorney General\u2019s Proposed Rulemaking Action\u2014a 16-page document<\/a> laying out and expanding on (in less legalese) the legislation itself.<\/p>\n

Truly understand the law.<\/h2>\n

We had conversations with our lawyers, two different outside counsels, and received guidance from four different outside private entities.<\/p>\n

Reviewed all documents provided by the state.<\/h2>\n

Including the Standardized Regulatory Impact Assessment and Fiscal Impact Report.<\/p>\n

Evaluated our tech.<\/h2>\n

We analyzed our platform top to bottom, looking at every step of every process to ensure we could handle the various flows of user requests for their data. We determined how to manage these user requests immediately, and possibly in the future.<\/p>\n

Changed our tech.<\/h2>\n

Significant changes to our core technology weren\u2019t necessary; most of the engineering work was around handling requests that consumers may make and having a way to verify those requests, in addition to what we already had in place.<\/p>\n

We implemented a system to log each request for data changes in our ticketing system. These will be held for 24 months. We\u2019ll be tracking our number of requests and time for responses, and these statistics will eventually be published within our privacy policy after we have captured a year\u2019s worth of data.<\/p>\n

Updated our privacy policy.<\/h2>\n

We simplified and streamlined our privacy policy<\/a>\u2014making it more human-friendly and less lawyerly, while also clearly outlining our data use cases.<\/p>\n

Revised our Own Your Data<\/a> portal to include four options:<\/h2>\n
    \n
  1. Do not sell my data.<\/b> The law specifies that companies must notify customers who have gone through us to connect to data within the past 6 months, but we\u2019re also telling all downstream customers when someone makes this request. This requires end-users to use a webform for verification.<\/em><\/li>\n
  2. Tell me what data you have about me.<\/b> This requires end-users to use a webform for verification.<\/em><\/li>\n
  3. Delete my data.<\/b> This requires end-users to use a webform for verification.<\/em><\/li>\n
  4. Change my data.<\/b> This was required of us by GDPR so it was already an option.<\/em><\/li>\n<\/ol>\n

    Collected<\/h2>\n

    We are collecting signed attestation and proof of notice from third party data.<\/p>\n

    Trained<\/h2>\n

    We will have third-party training and testing on CCPA for all employees completed by December 31.<\/p>\n

    Looked at the bigger picture<\/h2>\n

    As a company, we decided to apply CCPA guidelines to all people throughout the United States.<\/p>\n

    Reviewed. Reviewed. Reviewed.<\/h2>\n

    As it turns out, there were lots of little things, but no major projects. We believe in transparency and we\u2019re people-focused; we were able to make the necessary adjustments without much engineering effort.<\/p>\n

    And we\u2019re not done. We proactively review what is coming from legislatures and ballots across the country to help guide our thinking but also because our solutions must be the most stringent.<\/p>\n

    While this area is continuing to evolve, we plan to be ahead of what\u2019s coming.
    \nIt\u2019s the right thing to do.<\/p>\n","protected":false},"excerpt":{"rendered":"

    With the California Consumer Privacy Act (CCPA) going into effect at the start of next year, FullContact has been preparing for the developments to come. We provide brands with the ability to have the most relevant interactions with customers, prospects, and the public based on identity — so the end goals of CCPA are in […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_improvement_type_select":"improve_an_existing","_thumb_yes_seoaic":false,"_frame_yes_seoaic":false,"seoaic_generate_description":"","seoaic_improve_instructions_prompt":"","seoaic_rollback_content_improvement":"","seoaic_idea_thumbnail_generator":"","thumbnail_generated":false,"thumbnail_generate_prompt":"","seoaic_article_description":"","seoaic_article_subtitles":[],"footnotes":""},"categories":[640],"tags":[208,101,108,451],"class_list":["post-17687","post","type-post","status-publish","format-standard","hentry","category-privacy","tag-privacy","tag-ccpa","tag-gdpr","tag-data-privacy"],"acf":[],"yoast_head":"\nHow FullContact Prepared for CCPA | FullContact<\/title>\n<meta name=\"description\" content=\"The eleven steps FullContact took to prepare for the California Consumer Privacy Act (CCPA), and our reasoning behind our decisions.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How FullContact Prepared for CCPA\" \/>\n<meta property=\"og:description\" content=\"The eleven steps FullContact took to prepare for the California Consumer Privacy Act (CCPA), and our reasoning behind our decisions.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/\" \/>\n<meta property=\"og:site_name\" content=\"FullContact\" \/>\n<meta property=\"article:published_time\" content=\"2019-12-17T17:30:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-01-11T15:55:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.fullcontact.com\/wp-content\/uploads\/2019\/12\/ccpa-thumb@2x.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1380\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"FullContact\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.fullcontact.com\/wp-content\/uploads\/2019\/12\/ccpa-thumb@2x.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@fullcontact\" \/>\n<meta name=\"twitter:site\" content=\"@fullcontact\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"FullContact\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/\"},\"author\":{\"name\":\"FullContact\",\"@id\":\"https:\/\/www.fullcontact.com\/#\/schema\/person\/046a6157300f0577cf0a6122fb63080e\"},\"headline\":\"How FullContact Prepared for CCPA\",\"datePublished\":\"2019-12-17T17:30:40+00:00\",\"dateModified\":\"2023-01-11T15:55:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/\"},\"wordCount\":706,\"publisher\":{\"@id\":\"https:\/\/www.fullcontact.com\/#organization\"},\"keywords\":[\"privacy\",\"CCPA\",\"GDPR\",\"data privacy\"],\"articleSection\":[\"Privacy\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/\",\"url\":\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/\",\"name\":\"How FullContact Prepared for CCPA | FullContact\",\"isPartOf\":{\"@id\":\"https:\/\/www.fullcontact.com\/#website\"},\"datePublished\":\"2019-12-17T17:30:40+00:00\",\"dateModified\":\"2023-01-11T15:55:19+00:00\",\"description\":\"The eleven steps FullContact took to prepare for the California Consumer Privacy Act (CCPA), and our reasoning behind our decisions.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.fullcontact.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How FullContact Prepared for CCPA\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.fullcontact.com\/#website\",\"url\":\"https:\/\/www.fullcontact.com\/\",\"name\":\"FullContact\",\"description\":\"Relationships, reimagined.\",\"publisher\":{\"@id\":\"https:\/\/www.fullcontact.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.fullcontact.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.fullcontact.com\/#organization\",\"name\":\"FullContact\",\"url\":\"https:\/\/www.fullcontact.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fullcontact.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.fullcontact.com\/wp-content\/uploads\/2019\/11\/fc-logo@2x.png\",\"contentUrl\":\"https:\/\/www.fullcontact.com\/wp-content\/uploads\/2019\/11\/fc-logo@2x.png\",\"width\":200,\"height\":38,\"caption\":\"FullContact\"},\"image\":{\"@id\":\"https:\/\/www.fullcontact.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/fullcontact\",\"https:\/\/www.linkedin.com\/company\/fullcontact-inc-\",\"https:\/\/www.youtube.com\/user\/FullContactAPI\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.fullcontact.com\/#\/schema\/person\/046a6157300f0577cf0a6122fb63080e\",\"name\":\"FullContact\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fullcontact.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b4c9a289323b21a01c3e940f150eb9b8c542587f1abfd8f0e1cc1ffc5e475514?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b4c9a289323b21a01c3e940f150eb9b8c542587f1abfd8f0e1cc1ffc5e475514?s=96&d=mm&r=g\",\"caption\":\"FullContact\"},\"url\":\"https:\/\/www.fullcontact.com\/blog\/author\/user\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How FullContact Prepared for CCPA | FullContact","description":"The eleven steps FullContact took to prepare for the California Consumer Privacy Act (CCPA), and our reasoning behind our decisions.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/","og_locale":"en_US","og_type":"article","og_title":"How FullContact Prepared for CCPA","og_description":"The eleven steps FullContact took to prepare for the California Consumer Privacy Act (CCPA), and our reasoning behind our decisions.","og_url":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/","og_site_name":"FullContact","article_published_time":"2019-12-17T17:30:40+00:00","article_modified_time":"2023-01-11T15:55:19+00:00","og_image":[{"width":1920,"height":1380,"url":"https:\/\/www.fullcontact.com\/wp-content\/uploads\/2019\/12\/ccpa-thumb@2x.jpg","type":"image\/jpeg"}],"author":"FullContact","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.fullcontact.com\/wp-content\/uploads\/2019\/12\/ccpa-thumb@2x.jpg","twitter_creator":"@fullcontact","twitter_site":"@fullcontact","twitter_misc":{"Written by":"FullContact","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/#article","isPartOf":{"@id":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/"},"author":{"name":"FullContact","@id":"https:\/\/www.fullcontact.com\/#\/schema\/person\/046a6157300f0577cf0a6122fb63080e"},"headline":"How FullContact Prepared for CCPA","datePublished":"2019-12-17T17:30:40+00:00","dateModified":"2023-01-11T15:55:19+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/"},"wordCount":706,"publisher":{"@id":"https:\/\/www.fullcontact.com\/#organization"},"keywords":["privacy","CCPA","GDPR","data privacy"],"articleSection":["Privacy"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/","url":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/","name":"How FullContact Prepared for CCPA | FullContact","isPartOf":{"@id":"https:\/\/www.fullcontact.com\/#website"},"datePublished":"2019-12-17T17:30:40+00:00","dateModified":"2023-01-11T15:55:19+00:00","description":"The eleven steps FullContact took to prepare for the California Consumer Privacy Act (CCPA), and our reasoning behind our decisions.","breadcrumb":{"@id":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.fullcontact.com\/blog\/privacy\/how-fullcontact-prepared-for-ccpa\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fullcontact.com\/"},{"@type":"ListItem","position":2,"name":"How FullContact Prepared for CCPA"}]},{"@type":"WebSite","@id":"https:\/\/www.fullcontact.com\/#website","url":"https:\/\/www.fullcontact.com\/","name":"FullContact","description":"Relationships, reimagined.","publisher":{"@id":"https:\/\/www.fullcontact.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fullcontact.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.fullcontact.com\/#organization","name":"FullContact","url":"https:\/\/www.fullcontact.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fullcontact.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.fullcontact.com\/wp-content\/uploads\/2019\/11\/fc-logo@2x.png","contentUrl":"https:\/\/www.fullcontact.com\/wp-content\/uploads\/2019\/11\/fc-logo@2x.png","width":200,"height":38,"caption":"FullContact"},"image":{"@id":"https:\/\/www.fullcontact.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/fullcontact","https:\/\/www.linkedin.com\/company\/fullcontact-inc-","https:\/\/www.youtube.com\/user\/FullContactAPI"]},{"@type":"Person","@id":"https:\/\/www.fullcontact.com\/#\/schema\/person\/046a6157300f0577cf0a6122fb63080e","name":"FullContact","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fullcontact.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b4c9a289323b21a01c3e940f150eb9b8c542587f1abfd8f0e1cc1ffc5e475514?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b4c9a289323b21a01c3e940f150eb9b8c542587f1abfd8f0e1cc1ffc5e475514?s=96&d=mm&r=g","caption":"FullContact"},"url":"https:\/\/www.fullcontact.com\/blog\/author\/user\/"}]}},"_links":{"self":[{"href":"https:\/\/www.fullcontact.com\/wp-json\/wp\/v2\/posts\/17687","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fullcontact.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fullcontact.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fullcontact.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fullcontact.com\/wp-json\/wp\/v2\/comments?post=17687"}],"version-history":[{"count":0,"href":"https:\/\/www.fullcontact.com\/wp-json\/wp\/v2\/posts\/17687\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.fullcontact.com\/wp-json\/wp\/v2\/media?parent=17687"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fullcontact.com\/wp-json\/wp\/v2\/categories?post=17687"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fullcontact.com\/wp-json\/wp\/v2\/tags?post=17687"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}