California Consumer Privacy Act, the agreement required when personal information is sold or disclosed (Cal. Civ. Code 1798.100(d))
A covered business that licenses identifiable personal information of Californians to a buyer must sign an agreement limiting it to specified purposes and binding the buyer to the CCPA's obligations.
Dated 28 Oct 2026Source checked 28 Oct 2026Basis: primary text
In the source's own words
“shall enter into an agreement with the third party, service provider, or contractor, that: (1) Specifies that the personal information is sold or disclosed by the business only for limited and specified purposes.”
Where it was read
Also read from the same source
- California Consumer Privacy Act, definition of sell (Cal. Civ. Code 1798.140(ad)(1))
- California Consumer Privacy Act, no new incompatible purpose without notice (Cal. Civ. Code 1798.100(a)(1), (c))
- California Consumer Privacy Act, voice recordings as biometric information (Cal. Civ. Code 1798.140(c))
- California Consumer Privacy Act, transfer in a merger, acquisition or bankruptcy is not a sale (Cal. Civ. Code 1798.140(ad)(2)(C))
- California Consumer Privacy Act, definition of deidentified (Cal. Civ. Code 1798.140(m))
- California Consumer Privacy Act, definition of service provider (Cal. Civ. Code 1798.140(ag)(1))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in these 2 guides