Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I collect personal information from my customers in California in Ohio? What are the requirements?

Based on the context documents provided, it appears that you are asking about collecting personal information from customers in California while being located in Ohio. Here are the requirements:

Requirements for Collecting Personal Information in Ohio

According to OHAC Rule 991-9-01 [2.1], personal information systems of the Ohio Expositions Commission (OEC) are managed on a “need-to-know” basis whereby the information owner determines the level of access required for an employee of OEC to fulfill his or her job duties. The determination of access to confidential personal information shall be approved by the employee’s supervisor and the information owner prior to providing the employee with access to confidential personal information within a personal information system. OEC shall establish procedures for determining a revision to an employee’s access to confidential personal information upon a change to that employee’s job duties including, but not limited to, transfer or termination. Whenever an employee’s job duties no longer require access to confidential personal information in a personal information system, the employee’s access to confidential personal information shall be removed.

Requirements for Collecting Personal Information in California

According to the California Consumer Privacy Act (CCPA), businesses that collect personal information from California residents must provide certain notices and disclosures to those residents. The CCPA defines “personal information” broadly to include information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

If you are collecting personal information from California residents, you must provide a privacy notice that includes the following information:

  • The categories of personal information that you collect
  • The purposes for which you collect and use personal information
  • The categories of third parties with whom you share personal information
  • The right of California residents to request access to and deletion of their personal information
  • The right of California residents to opt-out of the sale of their personal information, if applicable

You must also provide a “Do Not Sell My Personal Information” link on your website if you sell personal information.

Conclusion

Based on the above requirements, it is possible to collect personal information from customers in California while being located in Ohio. However, you must comply with the CCPA’s notice and disclosure requirements if you are collecting personal information from California residents. Additionally, you must follow the access restrictions and procedures outlined in OHAC Rule 991-9-01 for personal information systems in Ohio.

Source(s):
Jurisdiction

California, Ohio