In this article
An overview of Permutive's role in CCPA and user Privacy
- Q. What is CCPA?
- Q. Is Permutive CCPA compliant?
- Q. How can a publisher submit a request to access or delete information for a user?
- Q. How can publishers withdraw users from Permutive data collection?
- Q. How can the IAB help?
Q. What is CCPA?
The California Consumer Privacy Act (CCPA) is a state law restricting the use of personal data for California State residents. It will be enforced from January 2020. Under CCPA, consumers will be given the right to:
- access their data,
- erase their data,
- opt-out of the sale of their personal information.
Q. Is Permutive CCPA compliant?
For CCPA, Permutive will be classified as a ‘service provider’ to our publishers. We collect user information on behalf of these businesses, and only on their instruction.
Permutive takes consumer privacy seriously and does not sell publishers’ user data to third parties. However, we allow publishers to do so using the Permutive platform
Permutive will ensure compliance with CCPA by providing an option for publishers to access or delete data from our systems, when requested by a user. We have experience offering this capability for GDPR in Europe.
If a consumer opts out of the collection or ‘sale’ of their personal information, we will stop Permutive segmentation and targeting for those users, when requested by a publisher.
We encourage publishers to leverage first-party data. Permutive’s Edge DMP is designed to support you in segmenting and targeting users without using third-party data.
Q. How can a publisher submit a request to access or delete information for a user?
Catalog your list of users by the user ID in a list or spreadsheet and email it to firstname.lastname@example.org. We will action this within 45 days of receipt and confirm when the request is complete.
Q. How can publishers withdraw users from Permutive data collection?
Once a publisher receives a request from a user to opt out of the sale of their data on its site, they should contact Permutive. We will stop capturing information on that user and prevent their data being sent to an advertiser. Further information on how to remove Permutive data collection for a user, as defined by GDPR, is documented here.
Q. How can the IAB help?
“When a user clicks that “Do Not Sell My Personal Information” link, a signal is sent to technology companies they do business with via a technical mechanism that is being developed by the IAB Tech Lab.”