California Consumer Privacy Act (CCPA) – Ehelp

What is CCPA?

https://en.wikipedia.org/wiki/California_Consumer_Privacy_Act

The California Consumer Privacy Act (CCPA) is a bill intended to enhance privacy rights and consumer protection for residents of California, United States.

When does CCPA go in to effect?

January 1, 2020. When CCPA goes live, customers can begin requesting their data from websites if those websites meet specific criteria. The customer can also request that Their information be deleted/forgotten.

What websites are impacted?

Full details will be shared from legal but the 2 key benchmarks are if a company generates more than $25 million annually, or if they have over 50,000 transactions a year. Based on these, very few eFlorists will meet those thresholds.

What does a florist need to do?

It is the florists responsibility to notify us if they need to comply with CCPA. We will not be making changes to their sites to enable CCPA without them requesting the change. We would recommend if a florist is unsure, they should consult with a legal expert on the matter, and if they do meet the requirements they will be responsible for adhering to the full requirements of CCPA.

What do we do when we receive a request?

When a florist requests that a CCPA form be enabled, we will need to do the following:

Add a new section to their privacy policy/help section (Misty has the details)

Work with the UX team and create a Formstack form (better tracking) where a customer can request their data

The form will be similar in content and design as https://www.teleflora.com/gdpr

A custom HTML page with the form will be created on the florists website

The florist must include the form on the website, generally in the footer, and they must also have a toll free number in place

What happens when a customer requests their data?

The florist will receive an email from the customer requesting their data. It is the florists responsibility to validate the customers identity. The florist will then notify Teleflora/eFlorist that they have received a request for customer information, or to delete the customers information.

eFlorist will then coordinate with IT to request the information either be provided to the florist (for the customer), purged, or both. We will not be communicating with the customer directly in any way, this responsibility will be handled by the florist.