California AG Issues First CCPA Opinion: Consumers’ “Right to Know” Includes Businesses’ Internally Generated Inferences

The California Office of the Attorney General recently concluded that the California Consumer Privacy Act generally requires a covered business to disclose, upon request, its inferences about a consumer—whether generated internally or obtained from another source—unless the business can demonstrate that a statutory exception applies.