California Consumer Privacy Requests
California passed the California Consumer Privacy Act of 2018 (“CCPA”) and California Privacy Rights Act of 2020 (“CPRA”), which gives consumers rights with respect to the collection or sharing of their personal information and sensitive personal information.
The law grants, among other things, the right for consumers to know what information companies are collecting about them, why they are collecting it and with whom they are sharing it. If a company sells personal information, the law also grants consumers the right to opt out of a company selling their personal information.
SDG&E does not sell a consumer's personal information for any reason. When we do use data to serve our customers, we work hard to do it in a way that doesn't compromise privacy.
Under California Consumer Privacy, consumers may request two different types of reports or request to correct personal information. Consumers may also request the deletion of their personal information, subject to legal exceptions.
Consumers
SDG&E does not sell a consumer's personal information for any reason. When we do use data to serve our customers, we work hard to do it in a way that doesn't compromise privacy. Consumers can request a copy of their personal information collected from 1/1/2022 to present including where it is disclosed, request to delete or correct your personal information, subject to exclusions under the law.
Current/Former Employees & Job Applicants
All San Diego Gas and Electric employees, applicants, and retirees will be informed of what data we are collecting at or prior to point of collection. Please note that the foregoing rights do not extend to job applicants, current or former employees with respect to your relationship with us as such, but we do fully comply with the California Consumer Privacy Policy.
To learn more about the California Consumer Privacy Act, visit the California Attorney General's website.
Find more information about how we safeguard customer privacy by reading our Website Privacy Policy, Privacy Notice and California Consumer Privacy Policy, which includes SDG&E's Notice at Collection.
What You Can Request from SDG&E
Consumers may request two different types of reports, a Summary report, and a Personal Information report. Consumers may also request the deletion of their personal information with some exceptions. Consumers may request to correct inaccurate personal information about themselves.
- The Summary report provides the categories of information that SDG&E collects, the purposes for which SDG&E uses the information, the sources from which that information was obtained and to whom we disclose personal information by category. This report is not specific to your account and does not provide details about your personal information.
- The Personal Information report, sometimes known as the access report, contains the personal information SDG&E and contracted service providers have collected about you, the purposes for which SDG&E uses the information, the sources from which that information was obtained and to whom we disclose that information by category. As this report may contain sensitive information, you will be provided instructions on how to access your report when it is complete.
- California Consumer Privacy allows for the deletion of personal information; however, there are exceptions provided under the law, where a business or a service provider is not required to delete a consumer's personal information. As SDG&E generally collects information necessary to provide you with utility service, your request for deletion of information may results in no information or limited information being deleted.
- The Consumer Correction request allows California residents to correct their personal information that SDG&E collects about you. Additionally, third parties, such as contracted service providers must correct inaccurate data they have in their possession.
Job applicant, current or former employee information is collected within the scope of employment and is not available for data reporting or data deletion.
Opting Out of the Sale of Personal Information
SDG&E does not sell a consumer’s personal information for any reason; therefore, we do not provide the ability to opt out of the sale of personal information. To read more about how SDG&E handles your information, visit our Website Privacy Policy, Privacy Notice and California Consumer Policy Policy.
Who Can Make a California Consumer Privacy Request
Consumers who are residents of California can make requests.
-
A customer is an individual consumer who has service (current service or previous service) with SDG&E, either as the Primary Account holder or a Co-Applicant on an SDG&E account. A co-applicant must be listed on the account if they wish to receive personal information related to that account.
-
An "other consumer" is an individual who has never received gas or electric service from SDG&E, but who has interacted with SDG&E in some capacity. This includes, but is not limited to, an individual who has:
-
reported an outage or requested an appliance check order, but may receive their bill from their landlord
- rented equipment from SDG&E
- visited an SDG&E event
-
-
An authorized agent may generally make California Consumer Privacy requests on behalf of a consumer only if the authorized agent is a parent or guardian acting for their minor child; or a person registered with the Secretary of State to act for another person or otherwise as specifically permitted under the CCPA/CPRA. After you submit your California Consumer Privacy Request, you will be contacted to provide proof that you are authorized to act on behalf of the consumer, prior to the request being completed.
Only an individual who is a resident of the State of California may make California Consumer Privacy requests. California Consumer Privacy requests may not be made to obtain information about a business entity.
For purposes of making a California Consumer Privacy request, the above excludes job applicants, current or former employees acting within the scope of their relationship as such for purposes of making requests hereunder.
How to Make a Request
California Consumer Privacy requires that requests for personal information, the correction or deletion of personal information must be verifiable. Here’s the type of information we need for verification:
- If you are a consumer who is identified as a customer, you will need your SDG&E account number and the service address associated with the account. You will also need to provide the last four digits of your social security number or your SDG&E account PIN (a pin is a 4-digit number established to access your account information and to authenticate a customer when contacting SDG&E).
- If you are a consumer who is identified as an “other consumer,” you will be required to provide the phone number, email address and physical or mailing address, that you may have provided when you interacted with us. This will help us find any personal information we may have collected about you.
- If you are an authorized agent making the request on behalf of a customer or "other consumer," you will be required to provide the same information as outlined for the individual making the request. You will also be required to provide proof that you are authorized to act on behalf of another. Please note that only a parent or guardian acting on behalf of their minor child; or a person registered with the Secretary of State is authorized to act on the consumer’s behalf.
- You will be asked to declare that the information you provided is truthful and accurate and that you authorized to obtain the information being requested.
Ensure you have checked your request for accuracy prior to submitting, including the requestor email address, which we will use to communicate with you about your request. No changes can be made to the request once it has been submitted. If you believe you have submitted information in error, you may cancel your request and submit a new one. SDG&E will review the information provided to verify your identity. If we cannot verify you, we will let you know and cancel the request.
Our goal is to fulfill requests within 45 days. Some requests may take longer, and the law provides additional time, if necessary. If we do need more time to complete your request, we’ll contact you.
Consumers
SDG&E does not sell a consumer's personal information for any reason. When we do use data to serve our customers, we work hard to do it in a way that doesn't compromise privacy. Consumers can request a copy of their personal information collected from 1/1/2022 to present including where it is disclosed, request to delete or correct your personal information, subject to exclusions under the law.
Current/Former Employees & Job Applicants
All San Diego Gas and Electric employees, applicants, and retirees will be informed of what data we are collecting at or prior to point of collection. Please note that the foregoing rights do not extend to job applicants, current or former employees with respect to your relationship with us as such, but we do fully comply with the California Consumer Privacy Policy.
To learn more about the California Consumer Privacy Act, visit the California Attorney General's website.
Find more information about how we safeguard customer privacy by reading our Website Privacy Policy, Privacy Notice and California Consumer Privacy Policy, which includes SDG&E's Notice at Collection.
Frequently Asked Questions
The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) is a law that allows residents in the State of California to have access to the types of information a company and contracted Service Providers collects, stores, and shares about them or their household. They have the right to request that information be deleted or corrected, as well as the right to opt out of the sale of their personal information.
For more information on consumer rights, obligations and updates regarding CCPA, please visit CCPA at State of California Attorney General’s office.
SDG&E does not sell or otherwise disclose your information to third parties for their commercial purposes without your explicit consent. There are times when we are obligated to share your information with specific third parties, such as for legal subpoenas or when we are ordered to by government agencies with authority over California utilities, such as the California Public Utilities Commission. We may also share elements of your personal information with companies that help us perform our core business functions to provide you service. These companies are obligated to safeguard your information with the same level of protection that SDG&E provides to its customers and are not allowed to disclose it to others or use it for any other purpose.
SDG&E does not sell a consumer’s personal information for any reason; therefore, we do not provide the ability to opt out of the sale of personal information.
Due to the personal nature of the information, SDG&E will only allow an authorized agent to make California Consumer Privacy requests on behalf of a consumer. As stated within the law, an authorized agent is a:
- parent or legal guardian acting on behalf of their minor child;
- a person registered with the Secretary of State authorized to act on a consumer's behalf.
After you submit your California Consumer Privacy request, you will be contacted to provide proof that you are authorized to act on behalf of another, prior to the request being completed.
The California Consumer Privacy Act applies only to individuals who are residents of the State of California. A California Consumer Privacy request may not be made to obtain information about a business entity.
SDG&E does not collect personal information about individuals who are not customers unless they have interacted with SDG&E in some capacity. This may include instances where the individual:
- Is an owner of a property within SDG&E’s service territory
- Is the emergency contact or a designee of an SDG&E customer
- Visited an SDG&E facility or event and provided personal information
- Provided personal information on an SDG&E website
- Requested an appliance check, where they receive their bill from their landlord
- Reported an outage to SDG&E
- Rented equipment from SDG&E
As specified in the California Consumer Privacy Policy, a consumer may receive up to two Personal Information Reports in a 12-month period.
If you made a California Consumer Privacy request, you may cancel that request at any time prior to the request being closed. California Consumer Privacy requests cannot be reopened once they are canceled, therefore if you change your mind after canceling the request, you will be required to make a new request. You may check the status or cancel your request at any time by providing your Request number and Requestor email address.
A California Consumer Privacy request may be canceled by SDG&E if the information provided cannot be verified because it does not match or cannot be accessed in our records. In some cases, consumers may be contacted to provide additional information to verify the request. If the consumer does not respond within 10 days, the request may be canceled. SDG&E may also cancel a California Consumer Privacy request if the consumer has exceeded two Personal Information Report requests in a 12-month period or has multiple open requests for the same report type.
Once you have submitted your California Consumer Privacy request, our goal is to fulfill your request within 45 days. Some requests may take longer, and the law provides additional time, if necessary. If SDG&E needs additional time to complete your request, you will be contacted via email. You may check the status of your request at any time by providing your Request number and Requestor email address.
You will be required to provide your request number in order to access your Personal Information report. Also, to check the status of your request or to cancel a request, your request number and requestor email address is required.
To protect your privacy, any highly sensitive personal information, such as social security numbers or bank account numbers, will be masked within your personal information report. SDG&E does not provide documents (ex. lease agreements or rebate applications) we may have collected from you, but will inform you of any such documents we may have.
You may need to contact those companies (ex. appliance retailers or construction contractors) to obtain any personal information they may have collected.
SDG&E does not knowingly collect personal information about minors, and it is therefore unlikely that any such information would be identified, deleted or furnished in response to a request on behalf of a minor.