|
Overview
The California Consumer Privacy Act ("CCPA") is a privacy regulation passed in 2018 which took effect January 1, 2020. Beeswax is classified as a "Service Provider" within this framework, meaning that we process personal data only upon the instructions of our customers and suppliers. This is similar to our designation as a "Processor" with regard to GDPR.
Beeswax is a signatory to the IAB's Compliance Framework and Limited Service Provider Agreement and intends to ingest and comply with the privacy strings provided by exchanges we listen to by the end of January, 2020. Very few, if any, of the major exchanges are currently passing these opt-out signals as of January 2, 2020.
Beeswax Customer-Facing Changes
A summary of how we will treat CCPA privacy strings:
- If an auction is received with an opt-out signal in the privacy string, we will still use the data in the auction request for the purpose of bidding, but will obfuscate all the Personal Data thereafter in logs and other endpoints, as we do for GDPR.
- If an auction includes the privacy string but the user has not opted-out, or the auction does not have the privacy string at all, we will continue processing the data as per normal.
New Log/Proto Fields
| Raw Log Field Name | Proto Field Name | Definition |
| us_privacy | RegulationsExtensions.us_privacy | US Privacy String as defined by the IAB CCPA Compliance Framework, and used to define the regulatory context governing the personal data contained within the associated bid request. |
Further Questions
If you have further questions about Beeswax's CCPA compliance, please feel free to reach out to your Customer Success Manager or to Beeswax Support.