What is the CCPA?
The California Consumer Privacy Act of 2018 (CCPA) is a new law regarding data privacy and security. The law grants California residents new rights regarding their personal information, and imposes various data protection duties on certain companies and organizations conducting business is California.
Is American United Federal Credit Union subject to the CCPA?
Yes, American United Federal Credit Union is subject to the requirements in the CCPA. As a not-for-profit financial institution with a presence in California, American United Federal Credit Union collects protected personal information (as defined by the CCPA) from more than 50,000 consumers.
Who can make requests to American United Federal Credit Union for CCPA-related information?
American United Federal Credit Union will accept Privacy Inquiries from any member. The request will be processed under the rules and guidelines of your state. In general, if we can verify who you are, we will provide information to you.
What are the personal information categories?
CCPA broadly defines that personal information is protected, no matter when the data was collected online or offline. The CCPA splits PI types into 12 categories, which are:
• Personal information listed in California Customer Records statute
• Protected classification characteristics under California and Federal Law
• Commercial information
• Biometric information
• Internet or other similar network activity
• Geolocation data
• Sensory data
• Profession or employment related information
• Non-Public education information
• Inferences drawn from other personal information
What does the CCPA require American United Federal Credit Union to do?
American United Federal Credit Union must post a notice to consumers about the personal information (PI) categories we collect from, and the intended purposes for each category before PI is collected. Any business that sells PI must also allow for consumers to opt-out of the sale of PI to third parties. American United Federal Credit Union does not sell PI. Finally, American United Federal Credit Union must allow a consumer the right to request what PI we have collected from them, and request the deletion of that information. Most of the PI that American United Federal Credit Union collects is not subject to deletion due to various exceptions within the CCPA.
What requests can I make?
You can make any combination of the following requests, please note it can take up to 45 days for a reply:
• What does American United Federal Credit Union collect about consumers in general?
• What have you collected about me specifically?
• Provide a copy of the data you’ve collected about me in the last 12 months.
• Please delete the information you’ve collected about me.
American United Federal Credit Union will notify you if additional time is required.
What does the CCPA NOT cover?
CCPA does not allow consumers the right to:
• Object to automated decision-making
• Object to information processing
• Delete all information
• Rectification of data