Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I collect IP addresses from participants in California? What are the requirements?

Requirements for Collecting IP Addresses in California

If you are collecting IP addresses from participants in California, you must comply with the state’s privacy laws. The Information Practices Act (Civil Code section 1798 et seq.) and other applicable laws pertaining to information privacy require that personal information be collected only for a lawful purpose and that individuals are informed of the collection and use of their personal information.

According to the documents provided, the California State Transportation Agency [1], the California Department of Corrections and Rehabilitation [3], and the Employment Development Department [5] all collect IP addresses for customer service and audit purposes. However, they do not distribute or sell IP addresses, and electronically collected personal information is exempt from requests made under the Public Records Act.

The Federal Trade Commission’s Children’s Online Privacy Protection Act (COPPA) Rule defines “personal information” to include persistent identifiers, such as an IP address [2]. If you collect IP addresses from children under the age of 13, you must comply with COPPA’s requirements, including obtaining verifiable parental consent.

In summary, if you are collecting IP addresses from participants in California, you must ensure that you are collecting the information for a lawful purpose, inform individuals of the collection and use of their personal information, and comply with any applicable privacy laws.

Source(s):
Jurisdiction

California