Bus. & Prof. Code, § 22575 · Chapter 22. Internet Privacy Requirements
Bus. & Prof. Code, § 22575
Text — As published in the Legislative Counsel's database, tables dated October 18, 2026 (pubinfo_2025.zip)
(a) An operator of a commercial Web site or online service that collects personally identifiable information through the Internet about individual consumers residing in California who use or visit its commercial Web site or online service shall conspicuously post its privacy policy on its Web site, or in the case of an operator of an online service, make that policy available in accordance with paragraph (5) of subdivision (b) of Section 22577. An operator shall be in violation of this subdivision only if the operator fails to post its policy within 30 days after being notified of noncompliance.
(b) The privacy policy required by subdivision (a) shall do all of the following:
(1) Identify the categories of personally identifiable information that the operator collects through the Web site or online service about individual consumers who use or visit its commercial Web site or online service and the categories of third-party persons or entities with whom the operator may share that personally identifiable information.
(2) If the operator maintains a process for an individual consumer who uses or visits its commercial Web site or online service to review and request changes to any of his or her personally identifiable information that is collected through the Web site or online service, provide a description of that process.
(3) Describe the process by which the operator notifies consumers who use or visit its commercial Web site or online service of material changes to the operator’s privacy policy for that Web site or online service.
(4) Identify its effective date.
(5) Disclose how the operator responds to Web browser “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer’s online activities over time and across third-party Web sites or online services, if the operator engages in that collection.
(6) Disclose whether other parties may collect personally identifiable information about an individual consumer’s online activities over time and across different Web sites when a consumer uses the operator’s Web site or service.
(7) An operator may satisfy the requirement of paragraph (5) by providing a clear and conspicuous hyperlink in the operator’s privacy policy to an online location containing a description, including the effects, of any program or protocol the operator follows that offers the consumer that choice.
Notes and commentary — not statutory text
History
Amended by Stats. 2013, Ch. 390, Sec. 1. (AB 370) Effective January 1, 2014.
Source of truth
- Edition
- As published in the Legislative Counsel's database, tables dated October 18, 2026 (pubinfo_2025.zip)
- Official file
- https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=BPC§ionNum=22575.
- Text hash
- sha256 8af019861e868f36826be3c222b35d8b47516b1c2964ad9f7fb3c6a9a1b29804
- Composed by
- compose_ca.py 2026-10-22: the Legislative Counsel's CAML content files read by a tokenizer (caml_readers.reader_a); an independent xml.etree reading (caml_readers.reader_b) agrees on every section
This section cites
Provisions in this library that the text above cites, as it prints each citation. A range cited as “ss. 61.13-61.16” links its first and last provisions.
Business and Professions Code
Cited by 3 provisions
Provisions in this library whose text cites Bus. & Prof. Code, § 22575. Each shows the citation as that text prints it.
Procedural information only. Not legal advice and not a substitute for the advice of an attorney. Confirm the current text with the official publisher before relying on it.