Certified Information Privacy Professional – United States (CIPP/US) — Question 64

The use of cookies on a website by a service provider is generally not deemed a ‘sale’ of personal information by CCPA, as long as which of the following conditions is met?

Answer options

• A. The third party stores personal information to trigger a response to a consumer’s request to exercise their right to opt in.
• B. The analytics cookies placed by the service provider are capable of being tracked but cannot be linked to a particular consumer of that business.
• C. The service provider retains personal information obtained in the course of providing the services specified in the agreement with the subcontractors.
• D. The information collected by the service provider is necessary to perform debugging and the business and service provider have entered into an appropriate agreement.

Correct answer: D

Explanation

Answer D is correct because it specifies that the information collected is vital for debugging, and an appropriate agreement ensures compliance with CCPA. Options A, B, and C do not meet the criteria outlined by CCPA regarding the non-sale classification of personal information, as they either do not address the necessity for debugging or lack the required agreements.