The California Consumer Privacy Act (CCPA), as amended, gives California resident consumers more control over the personal information that businesses collect about them and the CCPA regulations provide guidance on how to implement the law. This law secures privacy rights for California resident consumers, including:
Under the CCPA, “Personal Information” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked directly or indirectly to a particular California resident or your household. Common examples include personal data such as your name, Social Security number, customer account number, email address, internet browsing history, geolocation data, fingerprints, records of products purchased and inferences from other personal information that could create a profile about your preferences and characteristics.
“Sensitive Personal Information” under the CCPA is a specific subset of personal information that includes certain government identifiers (such as Social Security numbers); an account log-in, financial account, debit card, or credit card number with any required security code, password, or credentials allowing access to an account; precise geolocation; contents of mail, email, and text messages; genetic data; biometric information processed to identify a consumer; information concerning a consumer’s health, sex life, or sexual orientation; or information about racial or ethnic origin, religious or philosophical beliefs, or union membership. Consumers have the right to also limit a business’s use and disclosure of their sensitive personal information.
The CCPA, however, does not apply to certain information, such as publicly available information that is from government records and information subject to the Gramm-Leach-Bliley Act (“GLBA”).
Collection of personal information
The types of personal information we collect and share depends on the product or service you have with us. In the past twelve months (12) we may have collected for our business purposes the following categories of personal information:
Personal information does not include:
We may obtain the categories of information listed above from the following categories of sources:
Use of personal information for business purposes
We may use or disclose personal information we collect to operate, manage, and maintain our business, to provide our products and services, and to accomplish our business purposes and objectives, including the following:
Sharing of personal information
We may disclose your personal information only for a business purpose to the following categories of third parties:
In the preceding twelve (12) months, we may have disclosed the following categories of personal information to one or more of the categories of third parties listed above for a business purpose:
We have not “sold” personal information subject to the CCPA. For purposes of this Disclosure, “sold” means the disclosure of personal information to a third-party for monetary or other valuable consideration.
Rights under the CCPA
The CCPA provides California residents with certain rights regarding their personal information. California residents have the right to:
What to expect from Rockland Trust
Upon receipt of a request from you, we will provide acknowledgement within 10 business days and advise you how long we expect it to take to fully respond once we are able to verify your identity. Additional information may be required to verify your identity if you request specific pieces of personal information. An authorized agent may submit a request on behalf of another person. In those situations, we may require proof of authorization and verification of identity directly from the person for whom you are submitting a request. Each request must provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
We cannot fully respond to your request or provide you with personal information if we cannot verify your identity or if we cannot verify that you have authority to make the request on behalf of another individual. In addition, we will not process your request where an exception under the CCPA applies. We will advise you in our response if we are not able to process your request. Please note that, in response to a request, we will not provide specific Social Security numbers, driver’s license numbers, other government issued identification numbers, financial account numbers, health care or medical identification numbers, account passwords, security questions and answers, or any specific pieces of information if the disclosure presents the possibility of unauthorized access that could result in identity theft or fraud or unreasonable risk to data or systems and network security.
We will fully respond to a verified request within 45 calendar days of its receipt, as required under the CCPA. If we require additional time (up to an additional 45 calendar days), we will inform you of the extension in writing and explain the reason for the delay. We are not obligated to provide personal information more than twice in a twelve (12) month period.
We will not charge a fee to you or your authorized representative to process your request unless it is duplicative, repetitive, or manifestly burdensome. If it is determined that a fee is warranted, we will disclose the amount of the fee to you prior to processing your request.
We reserve the right to amend this privacy notice at our discretion and at any time.
Exercising your rights
If you are a California resident and would like to exercise the rights described above, please submit a verifiable request by:
