1798.110 & 1798.115 — Right to know and access

Requirement

Consumers may request the categories and specific pieces of personal information collected, the categories of sources, the business or commercial purposes, and the categories of third parties to whom it is disclosed, sold or shared — covering the preceding 12 months, and further back for information collected since 1 January 2022 unless impossible or disproportionate.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.