Notice at Collection

The requirement to inform individuals about data collection practices at or before the time personal information is collected. CCPA requires businesses to provide notice at collection explaining categories of personal information collected and purposes for use. This notice must be given at or before collection, meaning consumers should know what data is being gathered before providing it. Notice at collection differs from comprehensive privacy policies—it focuses on specific data being collected in that moment and immediate purposes. The notice should be concise, highlight key points, link to full privacy policy, be readily accessible, and use plain language. Notice at collection can be provided through just-in-time notices at data entry points, layered notices with summaries and full details, progressive disclosure as different data is collected, or brief notices with links to comprehensive information. Organizations should implement notice at collection for all collection points, ensure notices cover all data collected through that mechanism, update notices when practices change, and maintain records of notices provided.