What is a Consumer?
A consumer is an individual who is a resident of this state acting only in an individual or household context. A consumer does not include an individual acting in a commercial or employment context.
Consumer’s Rights with Respect to the Processing of Personal Data
As of January 1st, 2025, consumers may submit a request to a controller regarding the processing of personal data belonging to that individual or a known child. Consumers may request the following from Controllers:
- Confirm whether a controller is processing the consumer's personal data
- Confirm whether a controller has access to the consumer’s personal data
- Request a correction of inaccuracies in the consumer's personal data if it is relevant to the controller’s purpose for processing the consumer's personal data
- Request deletion of personal data provided by or obtained about the consumer that is being used by the controller
- Obtain a copy of the consumer's personal data that the consumer previously provided to the controller, if the data is available in a digital format and processed by the controller in completely automated means
- Request to opt out of the processing of the consumer’s personal data for purposes of targeted advertising of the consumer, sale of the consumer’s personal data, or profiling the consumer based on the consumer data in the controller’s control
Controllers have a duty to establish ways for a Consumer to submit a request regarding the processing of personal data. Consumers may be required to authenticate themselves with the Controller prior to the controller processing the request.
Before submitting a complaint with the Attorney General’s Office, a consumer must:
- Submit a complaint with the controller of the data in question
- If the controller refused to process your complaint, you must appeal that decision with the controller of the data
- Once your appeal is denied or no response received, complete the Data Privacy Complaint Form on the Attorney General’s website
