Categories of Sources
Definition
Classifications of where personal information originates, such as directly from consumers, from service providers, from public records, from data brokers, from social media, or from affiliated companies. Disclosing categories of sources helps individuals understand how their information enters your systems—particularly important when you obtain data from sources other than the individual themselves. Common source categories include: direct collection through websites or apps, business transactions, customer service interactions, third-party data providers, marketing partners, public databases, social media platforms, affiliated entities, and inferences derived from other information. CCPA requires businesses to disclose categories of sources from which personal information is collected. This transparency helps consumers understand whether you're purchasing data about them, collecting it from public records, inferring it from their behavior, or obtaining it only through direct interactions.
Applicable Laws & Regulations
- 1CCPA Section 1798.100(b) - Disclosure of sources at or before collection
- 2CCPA Section 1798.110(c)(2) - Categories of sources in response to requests
- 3GDPR Article 14 - Information requirements when data not obtained from data subject