The California Consumer Privacy Act, also referred to as CCPA, is a privacy-centric bill aimed at protecting the privacy of California consumers. Here we discuss how Darwin addresses the CCPA and how it may affect your application.
The CCPA is a large piece of legislation and covers many topics that have no direct impact or tie with your use of Darwin. However, there are areas of the CCPA where your customers might have rights that relate to your use of Darwin. We’ve included a brief explanation of their rights and how Darwin can be used in a manner that supports you in servicing them below.
Under the CCPA, businesses must update privacy notices to specifically state what data is collected, categorize the data collected, explain the purpose for the data’s use, identify third parties with which that data is shared, and communicate the rights available to an individual.
Under the CCPA, California consumers may have the right to request and receive a list of personal information and additional details a business collects (or has collected), as well as the intended business use for collecting this data.
The consumer may also be able to request that any specific personal information be deleted. With the exception of specific types of data (e.g. billing or other regulatory required information), these deletion requests must be fulfilled by you, the business.
Under CCPA, an IP address may be considered personal data if it can identify a household.
Darwin’s default behavior is that IP addresses of visitors are always suppressed before being stored to disk on our servers using Darwin's core feature set. We set the last octet of IPv4 addresses (all connections to Darwin are made via IPv4) to 0 to ensure the full IP address is never written to disk. For example, if a visitor's IP address is 18.104.22.168, it will be stored as 22.214.171.124. The first three octets of the IP address are only used to determine the geographic location of the visitor.
Note: IP addresses can optionally be passed to Darwin as a User Attribute. If you, as a Darwin customer, opt to pass IP addresses to Darwin via the Identify API, IP addresses will be stored and might be considered Personal Information under CCPA. Use of the Identify API is optional in Darwin: the feature is not enabled by default and it can be used without passing IP addresses to our servers.
Your privacy and that of your users is a high priority for Darwin. We've built tools to make it easy for you to address requirements with the ever-evolving privacy laws—but if you have any questions with regards to these tools, please contact us at [email protected].