All companies that sell online to California consumers must post a privacy policy by July 1, 2004, under a first-of-its-kind law enacted by the Golden State.
The California Online Privacy Protection Act of 2003 applies to any company or person who conducts business with California consumers via the Internet and collects their personal information. Personal information includes names, physical addresses, e-mail addresses, telephone numbers, Social Security numbers or any other identifier that permits the physical or online contract of an individual residing in California.
This Mintz Levin publication discusses aspects of compliance with the new California law.