(a) When a consumer uses an authorized agent to submit a request to know or a request to delete, a business may require that the consumer do the following:
(1) Provide the authorized agent signed permission to do so.
(2) Verify their own identity directly with the business.
(3) Directly confirm with the business that they provided the authorized agent permission to submit the request.
(b) Subsection (a) does not apply when a consumer has provided the authorized agent with power of attorney pursuant to Probate Code sections 4121 to 4130.
(c) An authorized agent shall implement and maintain reasonable security procedures and practices to protect the consumer’s information.
(d) An authorized agent shall not use a consumer’s personal information, or any information collected from or about the consumer, for any purposes other than to fulfill the consumer’s requests, verification, or fraud prevention.
Note: Authority cited: Section 1798.185, Civil Code. Reference: Sections 1798.100, 1798.110, 1798.115, 1798.130 and 1798.185, Civil Code.