AB957-AA1,1,9
7“6. A controller that has obtained personal data about a consumer from a source
8other than the consumer shall be deemed in compliance with a consumer's request
9to delete the personal data under par. (a) 3. by doing any of the following:
AB957-AA1,1,1210
a. Deleting the personal data, retaining a record of the request and the
11minimum data necessary to ensure the consumer's personal data remains deleted
12from the controller's records, and not using the retained data for any other purpose.
AB957-AA1,2,2
1b. Not processing the consumer's personal data except as otherwise authorized
2under this section.”.
AB957-AA1,2,8
6“16. Personal data collected, processed, and maintained in compliance with the
7federal Children's Online Privacy Protection Act of 1998,
15 USC 6501 et seq., as
8amended.”.