OVHcloud CCPA Compliance Readiness


OVHcloud CCPA Compliance Readiness

An overview of frequently asked questions about the California Consumer Privacy Act and OVHcloud’s compliance activities.

What is the CCPA?

The CCPA is the California Consumer Privacy Act. The CCPA applies to California residents and imposes new rules on businesses in California. It is designed to give consumers more information about how businesses process their personal information, including disclosures to service providers and third parties. The CCPA was passed in 2018, amended in 2019, and takes effect on January 1, 2020.

What does the CCPA regulate?

Among other provisions, the CCPA regulates how businesses disclose their uses of personal information and gives consumers new rights over their personal information. Personal information is defined broadly and includes "information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household."

What is a business? What is a service provider? What is a third party?

A business is a company that operates in California and meets certain other requirements and, in many cases, is a company you interact with directly. A service provider is a vendor. For example, OVHcloud works with a payment processor to help us collect online payments. A third party is a catch-all: if an entity or person is neither a business nor a service provider, they are likely a third party.

Will OVHcloud be compliant with the CCPA on January 1, 2020?

OVHcloud is committed to the core principles of the CCPA. We are committed to using personal information responsibly and protecting it with advanced technologies and robust internal policies and practices. We are aligning our privacy program, including our business practices, processes, and policies, to help us meet our obligations. We have engaged world-class leaders in the field of data privacy and protection to lead this effort alongside our own team.

What are some of the core obligations OVHcloud has under the CCPA? How is OVHcloud complying with those obligations?

OVHcloud is required to provide detailed notice of the personal information it collects, how it uses that personal information, and to who it discloses that personal information. OVHcloud also must comply with certain consumer requests. For example, you may ask us to disclose the personal information that we collected about you.

What personal information does OVHcloud hold?

As a hosting service, we primarily receive personal information sent to our servers by OVHcloud customers or their end users. Our customers determine what personal information is hosted by OVHcloud—we are a service provider to them. For inquiries relating to personal information OVHcloud may hold about you on behalf of an OVHcloud customer, please contact the OVHcloud customer.

If you are an OVHcloud customer, we may also collect personal information about you, such as your contact information, when you create your account. Please see our Privacy Policy for a more detailed description of how we collect, use, and share personal information.

How does the CCPA impact customers outside of California?

The CCPA applies only to California residents. If you are not a California resident, the CCPA should not impact your relationship with us.

If you would like more information, please reach out to OVHcloud at privacy@corp.ovh.us.