| Exactly. The Parent comment strikes me as being very naïve. Right to Unsubscribe? Gmail and other email providers do this for you even if you are not a CA resident and even if the Marketer does not have a built-in Unsubscribe link. From a Marketer perspective, you cost money to send emails to, and if you are not going to open, they kind of don't want you on the list anyway. CCPA == GDPR? Not even close. Majority of CA businesses do not reach the compliance threshold and therefore do not have to or will not comply with requests. Additionally, you have no way to validate if the request was actually carried out. The company's "best efforts" to remove data from their systems is all that's required at best - and a lot of data can be retained for valid business reasons. Lastly - despite what CA residents believe (and similar to EU residents with GDPR) - CA laws do not apply to the rest of the country simply because they are unenforceable except in the most egregious cases - and even then it would have to be a very large business anyway. > because it's easier than building a California-specific version of a website or online product Nobody is doing this in practice. At best, they use some GeoIP thing or if you are logged into an account (which means they have your data anyway). The law does not require them to validate the user anyway, so it's all "best effort" again which usually means low effort. But hey, if it makes you feel warm and fuzzy believing these things - more power to you. |