Stirista: Committed to Transparency and Data Privacy in a Changing Landscape

stirista-author
Stirista
July 1, 2024
Personal,Data,Protection,Act,Or,Pdpa,Concept.,Businessmen,Use,A
Jump to...

    This past year has been a whirlwind of events, with many new pro-consumer data privacy and sensitivity laws and regulations being put into place. While this may throw some other marketing companies through a loop, at Stirista, we’re easily able to adapt and adhere to whatever is thrown our way. 

    We know that not everyone is able to keep up with all that’s going on,, so we thought we’d boil down the 3 biggest issues in this ecosystem for you. We hope you find it helpful!

    CCPA (California Consumer Protection Act)

    The CCPA is a new law designed to protect consumers’ data privacy. It empowers individual consumers in California to find out what data is being collected about them, to request that companies delete their personal data, and to opt that their data not be sold to third parties. This means that any for-profit business that serves customers living in California must comply with the CCPA, not just California-based businesses. CCPA also affects any business serving customers in California that meets any of the following criteria: the company must earn $25+ Million in annual revenue, the business must own the personal data of over 50,000 consumers, households or devices, and if more than half of the business’s annual revenue comes from selling consumer data in their possession. 

    CRPA (California Privacy Rights Act)

    The CRPA is, at its core, an addition to the CCPA. It builds on the original law by enabling consumers to limit the sale and sharing of their personal information. It also allows consumers to exercise greater control over the use of their sensitive personal information by covered entities. As of January 1, 2023, businesses affect by CCPA will also have to follow these rules: 

    • Notify consumers that it sells personal information to third parties and that consumers have the right to opt out
    • Post a “Do Not Sell or Share My Personal Information” link and a “Limit the Use of Sensitive Personal Information” link (or a clearly labeled link that combines both) on the homepage as well as any other page that collects user’s personal information
    • Allow consumers to to opt out of the sale and/or sharing of their personal information as well as limit the use of their sensitive personal information without creating an account
    • Properly inform consumers of their right to opt out and provide the do not sell link in an online privacy policy or CPRA-specific description of rights
    • Respect opt-out decisions for a minimum of 12 months before asking the consumer again to authorize the sale/sharing of personal information or use of sensitive personal information
    • Provide adequate training to individuals responsible for handling consumer privacy rights inquiries and processing opt-out requests

    Washington & Nevada’s Consumer Health Data Laws

    Washington’s MHMDAand Nevada’s SB 370(collectively, “CHD Laws”) went into effect on March 31, 2024. They both limit what consumer health data companies can legally collect. This means that companies that are operating/serving consumer within these states collecting health data are obligated to do the following: 

    • Obtain consent for collecting and sharing health information that is not necessary to provide the product or service a consumer requested
    • Providing individual rights of access, withdrawal of consent and deletion of any health data provided
    • Prohibiting geofencing around certain health facilities to identify or track consumers seeking health services
    • Post a Consumer Health Privacy Policy on the homepage as well as any other page that collects user’s personal information

    Stirista is dedicated to adhering to public policies and respecting all of our users’ data. Any data we collect is public or given consensually. What makes Stirista’s data unique is that the assets are fueled by our in-house ESP and DSP. No competing data organization has the level of feedback on all data points that we do, nor the ability to update the data as quickly. We make sure you’re up to date with new data regulations because we take them seriously ourselves!

    Marketing insights, news and events sent to your inbox.