Last Reviewed: November 23, 2020
Categories of Personal Information Collected
|Category of Personal Information
(corresponds to categories listed in CCPA §1798.140(o)(1))
|Examples||Do we collect?||Do we disclose for business purposes?||Do we sell?|
|A. Identifiers.||A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.||Yes||Yes||No|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).||A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.||Yes||Yes||No|
|C. Protected classification characteristics under California or federal law.||Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).||Yes||Yes||No|
|D. Commercial information.||Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.||Yes||Yes||No|
|E. Biometric information.||Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.||Yes||No||No|
|F. Internet or other similar network activity.||Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.||Yes||Yes||No|
|G. Geolocation data.||Physical location or movements.||No||No||No|
|H. Sensory data.||Audio, electronic, visual, thermal, olfactory, or similar information.||Yes||Yes||No|
|I. Professional or employment-related information.||Current or past job history or performance evaluations.||Yes||Yes||No|
|J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).||Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.||Yes||Yes||No|
|K. Inferences drawn from other personal information.||Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.||Yes||Yes||No|
Personal information does not include:
- Publicly available information from government records.
- De-identified or aggregated consumer information.
- Information excluded from the CCPA's scope, like:
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.
Personal Information Sources
Sutherland obtains the categories of personal information listed above from the following categories of sources:
- Directly from you. For example, for employment purposes, forms you complete or to fulfill product and services requests
- Indirectly from you. For example, from observing your actions on our Website.
- Directly from our clients or their agents. For example, from documents that our clients provide to us related to the services for which they engage us.
- Indirectly from our clients or their agents. For example, through information we collect from our clients in the course of providing services to them.
Purposes for which Personal Information is Used
Your Consumer Rights Under the CCPA
Under the CCPA, you may have the following consumer rights. Please note that these rights are not absolute and in certain cases are subject to conditions or limitations as specified in the CCPA:
Abbreviated Right to Know (Collection):
You have the right to request, at no charge, we disclose to you the categories and specific pieces of Personal Information Sutherland has collected in within the last twelve (12) months.
Expanded Right to Know (Collection and Disclosure):
You have the right to request that we disclose certain information about how we have handled your Personal Information within the last twelve (12) months, including the:
- categories of Personal Information collected about you;
- categories of sources from which we collected your Personal Information;
- business and/or commercial purposes for collecting and disclosing your Personal Information; and
- categories of third parties to/with whom your Personal Information has been disclosed/shared, including for a business purpose; and
- the specific pieces of Personal Information collected about you.
Access and Portability:
You have the right to obtain a list of categories and a copy of the Personal Information, in a portable and (if technically feasible) readily usable format, collected on you covering the 12-month period preceding the request.
You have the right to request the deletion of your Personal Information we have collected from you. This right may be subject to certain conditions and limitations under the law.
Right to be Free from Discrimination:
You may exercise all of the above rights at all times and Sutherland will not unlawfully discriminate against you for exercising your rights under the CCPA.
Submitting a Request to Exercise Your Rights
California residents have the right to submit a request for deletion of information under certain circumstances.
Please note that you must verify your identity and request before further action is taken. As a part of this process, government identification may be required. Consistent with California law, you may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide a valid power of attorney, the requester’s valid government issued identification, and the authorized agent’s valid government issued identification.
To exercise any of your rights as set out above, please contact us by completing the form available here or call us toll free at 1-866-I-OPT-OUT (1-866-467-8688) and enter Service Code 843.
Sutherland Data Privacy Office
Attention. Chief Data Privacy Officer
Sutherland Global Services Inc.,
1160 Pittsford Victor Road
Pittsford, NY 14534