Notice at Collection
The point-of-collection disclosure required under CCPA/CPRA listing the categories of personal information collected and the purposes for which they are used.
Full Definition
California's CCPA, as amended by CPRA, requires a 'notice at collection' at or before the point where a business collects personal information from a California consumer. The notice must list the categories of personal information collected (using the statutory categories), the categories of sensitive personal information, the business or commercial purposes for each, whether the information is sold or shared, and the retention period for each category. It must include links to the full privacy policy and to the Do Not Sell or Share and Limit Use of Sensitive Personal Information mechanisms.
The notice at collection is distinct from the broader privacy policy, which satisfies the Section 1798.130 right-to-know disclosure. Both must coexist. Analogues in other jurisdictions include the DPDP Act's section 5 notice (itemised, in English or an Eighth Schedule language, standalone before consent), GDPR Articles 13 (direct collection) and 14 (indirect collection), and Singapore PDPA's section 20 notification obligation.
Related terms
Notice (DPDP s.5)
The itemised disclosure a Data Fiduciary must give a Data Principal before — or at the time of — requesting consent under Section 6 of the DPDP Act.
Lawful Basis
A legal justification under GDPR for processing personal data — one of six bases must apply before processing can begin.
Data Subject
An identified or identifiable natural person whose personal data is being processed.
Relevant regulations
Automate your privacy program
TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.
Free 14-day trial · No credit card required · Setup in minutes