CCPA Compliance

CCPA is the California Consumer Privacy Act. It took effect on January 1st, 2020. The goal of this law is to enforce the privacy rights of individuals who reside in the state of California, and to give them the right to control the selling and disclosure of their personal data. Many of our clients who have been researching the CCPA are interested in learning more about the measures we have taken to comply with its standards. This document addresses TSD's role in the CCPA and the tools that TSD provides to allow our clients to adhere to CCPA consumer rights. For more information on the CCPA, refer to the web site of the State of California Department of Justice at https://www.oag.ca.gov/privacy/ccpa.

To view a tutorial for this topic from the web application, click TUTORIALS and select the Best Practices learning course.

TSD's Role

In CCPA terms, a "Business" collects the consumer data required to provide a service, and a "Service Provider" processes information on behalf of a business.

TSD falls into the category of a Service Provider; we employ the software as a service (SaaS) model to provide applications to Car Dealerships and Rental Car Companies (the businesses) who then provide courtesy car and car rental services to consumers.

As businesses providing services to consumers, it is the responsibility of the Car Dealerships and Rental Car Companies to notify the consumer as to what personal information is being collected, sold, and disclosed, provide a means to opt out of the sale of consumers’ personal data, and adhere to most CCPA requirements.

Data collected from the consumer may include:

• Name
• Postal Address
• Email Address
• Driver’s license number
• Date of Birth
• Phone numbers
• Insurance Policy Number and Expiration Date

The consumer rights defined in CCPA that pertain to TSD systems are described below.

Right to Access

TSD software includes a legally binding contract or reservation in which the consumer’s personal information is stored. Businesses may deliver this form to a consumer through email or print methods to allow a consumer access to the personal data that was collected.

Right to Erasure

The CCPA's "right to erasure" principle guarantees a consumer the right to ask for his or her personal data to be removed from your system. For the affected records, this action is permanent; the data cannot be retrieved later.

If a customer requests that their personal information be removed from the system, you can remove this data from the Customer Hub. The following fields are subject to being purged from the Customer record:

• Name
• Address
• Email Address
• Date of Birth
• Driver’s License
• Insurance Policy Number and Expiration Date

Important Note: After personal data is removed, you can no longer find the customer in search results. You may no longer be able view all personal information on their past appointments and agreements.

Restrictions

The following restrictions apply.

• You can only remove a customer record if there are no open agreements or pending appointments associated with the customer record.
• Deleting the customer’s record does not clear the customer’s PII data on past agreements or appointments.

How to