SHARE

November 22, 2022

Can a business require a consumer to submit a declaration under penalty of perjury in order to prove their identity?

You've Reached Your
Free Article Limit This Month
Register for free to get unlimited access to all Law.com OnPractice content.
Register Now

The regulations implementing the CCPA require that a business verify the identity of a consumer that submits a specific-information access request to a "reasonably high degree of certainty."[1] The regulations provide as an example matching three pieces of personal information provided by the consumer with three pieces of personal information maintained by the business and obtaining a signed declaration under penalty of perjury that the requestor is the consumer whose personal information is the subject of the request.[2]

Although businesses are permitted to request that consumers sign a declaration under penalty of perjury, only 1% of companies state in their privacy notices that they require such an affidavit or a declaration.[3] However, it is possible that once a data subject request has been submitted, other companies also request a signed verification prior to providing information in response to a specific-information access request, even if that prerequisite is not in the corporate privacy notice.


[1] Cal. Code Regs. tit. 11, § 999.325(c) (2021).

[2] Cal. Code Regs. tit. 11, § 999.325(c) (2021).

[3] Greenberg Traurig LLP reviewed the publicly available privacy notices and practices of 555 companies (the Survey Population). The Survey Population comprises companies that had been ranked within the Fortune 500 at some point in the past five years as well as additional companies selected from industries that are underrepresented in the Fortune 500. While the Survey Population does not fully match the current Fortune 500 as a result of industry consolidation and shifts in company capitalization, we believe that the aggregate statistics rendered from the Survey Population are representative of mature companies. Greenberg Traurig's latest survey was conducted between September and October 2022.

ALM expressly disclaims any express or implied warranty regarding the OnPractice Content, including any implied warranty that the OnPractice Content is accurate, has been corrected or is otherwise free from errors.

More From Greenberg Traurig

Schedule A I-140: Fast-Track Green Card for Nurses and Physical Therapists

By Caterina Cappellari Greenberg Traurig May 26 , 2023

Most employment-based permanent residency applications require the applicant to go through the PERM labor certification process where the U.S. Department of Labor (DOL) certifies that there are not sufficient U.S. workers able, available, and qualified to fill a position.

SCOTUS to Warhol Foundation: Your Use of Previously Licensed Work Isn't Fair

By Steven J. Wadyka Jr. Greenberg Traurig May 26 , 2023

On May 18, 2023, the United States Supreme Court issued its long-awaited decision in Andy Warhol Foundation for the Visual Arts, Inc. v. Goldsmith, a case that presented the Court with an opportunity to bring clarity to the often highly subjective standards lower courts apply when deciding the issue of fair use of visual works of art under copyright law.

Supreme Court Issues Decision Sharply Limiting Clean Water Act Jurisdiction over Wetlands

By Bernadette M. Rappold Greenberg Traurig May 26 , 2023

Sometimes the most monumental Supreme Court decisions spring from the most modest facts.

More From Cybersecurity

Processing Sensitive Personal Information under U.S. State Privacy Laws

By Zachary S. Schapiro Greenberg Traurig May 23 , 2023

As of now, nine states (CA, CO, CT, IA, IN, MT, TN, UT, and VA) have passed comprehensive privacy laws that are in effect (CA and VA), or are about to go into effect sometime soon (CO, CT, IA, IN, MT, TN, and UT).

Labor Department Releases New Guidance on Agency Enforcement of PUMP for Nursing Mothers Act

By Patricia Anderson Pryor Jackson Lewis P.C. May 19 , 2023

The U.S. Department of Labor Wage and Hour Division (WHD) has published guidance for agency officials responsible for enforcing the “pump at work” provisions of the Fair Labor Standards Act (FLSA), including those enacted under the 2022 Providing Urgent Maternal Protections for Nursing Mothers Act (PUMP Act).

Finding the Delta: Understanding the Differences in How State Privacy Laws Define Corporate Affiliates

By David A. Zetoony Greenberg Traurig May 15 , 2023

All modern privacy statutes regulate when personal information can be shared with third parties, whether those third parties are service providers, vendors, contractors, or business partners.

Featured Stories
Closeclose
Search
Menu

Working...