Authorized Agent
Definition
A person or entity that an individual designates to exercise privacy rights on their behalf. Under laws like CCPA and CPRA, consumers can authorize agents to submit access requests, deletion requests, or opt-out requests. This accommodation is important for individuals who need assistance—whether due to disability, language barriers, or complexity of the process. However, it also creates verification challenges for businesses. You're allowed to require proof that the authorized agent has permission to act on the consumer's behalf—typically through a signed authorization form or power of attorney. You may also need to verify the consumer's identity directly to prevent fraud. Some authorized agents operate at scale, submitting requests for thousands of individuals. Businesses should have clear procedures for handling authorized agent requests, including reasonable verification steps that don't create unreasonable barriers.
Applicable Laws & Regulations
- 1CCPA Section 1798.185(a)(7) - Authorized agent regulations
- 2CPRA amendments to Civil Code Section 1798.140(a) - Authorized agent definition
- 3CCPA Regulations Section 999.326 - Authorized agents