Hacker News Reader

Comment by lmkg | Hacker News Reader

> This means that it's plausible for a company which currently is doing shady stuff to legally continue doing so, as long as they can write up some fancy words to 'inform' and ensure that most people don't do the opt-out process.

CCPA requires you to have a link with the exact words "DO NOT SELL MY INFORMATION" visible on the homepage. That is an explicit provision. This somewhat limits company's ability to legalese their way around it.

View on HN

Still pretty crappy requiring users to take action to stop the selling of that information. Worse, it should be stopping the collection of it. Ugh. :-/

While that is true - a consumer must take action to protect their individual information - it may be that if enough people do this that the cost of compliance (responding to the ccpa requests) will make it less profitable to hold on to a consumer's information.

There are also lists with links and contact info of important businesses to exercise your CCPA opt-out or delete rights with like data brokers such as Experian, Epsilon, TransUnion as a start. Even ccpa email templates that may be easier to use rather than going through a form (not sure if they will work).

It actually is opt-in, not opt-out, by default. In order to do opt-out, a business has to demonstrate that their users are all above 13 and able to consent, which is a hard requirement that will force nearly all data brokers to do opt-in instead.

To completely stop collection is difficult. But the legislative will is clearly manifest, so it might happen.

The way I read CCPA, me going to the link "DO NOT SELL MY INFORMATION" in company A can (and IMHO will be) be legally followed by company A giving the information to company B for whatever reason (other than 'monetary or other valuable consideration'), and then company B selling that data, unless I go to company B's website and opt out there as well. And, of course, there are many "company B"'s, a random news website can easily have 50+ "partners" with whom they share data.

And yet... https://twitter.com/dhh/status/1216054342920200193 (thread)

Reply on news.ycombinator.com