December 30, 2019
Authored by: Bryan Cave and David Zetoony
There is no one strategy for disclosing privacy practices to consumers, or for complying with the federal and state laws (including the California Consumer Privacy Act, or CCPA) that govern data privacy. The following summarizes current trends within the retail industry:
- Privacy notices are, on average, 7.5 months old.
- Retail industry privacy notices are significantly newer than the privacy notices of companies in other industries.
- The majority of retailers have not updated their privacy notices for the CCPA.
- Retailer privacy notices that reference enumerated categories tend to use lists instead of tables.
- Retailers that discuss the sale of information are evenly split between selling and not selling data. The majority of retailer privacy notices, however, are silent or ambiguous about sale.
- The majority of retailer privacy notices do not include a “Do Not Sell” option. Retailers are slightly more likely, however, than other companies to include a Do Not