Back

Refrain from providing products and services, as necessary.


CONTROL ID
15580
CONTROL TYPE
Acquisition/Sale of Assets or Services
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Plan for selling facilities, technology, or services., CC ID: 06893

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Nothing in this part 13 shall be construed to require a controller to provide a product or service that requires the personal data of a consumer that the controller does not collect or maintain or to prohibit a controller from offering a different price, rate, level, quality, or selection of goods o… (§ 6-1-1308 (1)(d), Colorado Revised Statutes, Title 6, Article 1, Part 13, Colorado Privacy Act)
  • Nothing in subsection (a) of this section shall be construed to require a controller to provide a product or service that requires the personal data of a consumer which the controller does not collect or maintain, or prohibit a controller from offering a different price, rate, level, quality or sele… (§ 6 (b), Connecticut Public Act No. 22-15, An Act Concerning Personal Data Privacy and Online Monitoring)
  • Nothing in subsection (a) of this section shall be construed to require a controller to provide a product or service that requires the personal data of a consumer which the controller does not collect or maintain, or prohibit a controller from offering a different price, rate, level, quality, or sel… (§ 12D-106.(b), Delaware Code, Title 6, Subtitle II, Chapter 12D. Delaware Personal Data Privacy Act)
  • Nothing in subsection (a) of this section shall be construed to require a controller to provide a product or service that requires the personal data of a consumer which the controller does not collect or maintain, or prohibit a controller from offering a different price, rate, level, quality, or sel… (§ 12D-106.(b), Delaware Code, Title 6, Subtitle II, Chapter 12D. Delaware Personal Data Privacy Act)
  • require a controller to provide a product or service that requires the personal data of consumer that the controller does not collect or maintain; or (IC 24-15-4-1 ¶ 1(4)(A), Indiana Code, Title 24, Article 15, Consumer Data Protection)
  • require a controller to provide a product or service that requires the personal data of consumer that the controller does not collect or maintain; or (IC 24-15-4-1 ¶ 1(4)(A), Indiana Code, Title 24, Article 15, Consumer Data Protection)
  • A controller shall not process personal data in violation of state and federal laws that prohibit unlawful discrimination against a consumer. A controller shall not discriminate against a consumer for exercising any of the consumer rights contained in this chapter, including denying goods or service… (§ 715D.4.3., Iowa Code Annotated, Section 715D, An Act Relating to Consumer Data Protection, Providing Civil Penalties, and Including Effective Date Provisions)
  • A controller shall not process personal data in violation of state and federal laws that prohibit unlawful discrimination against a consumer. A controller shall not discriminate against a consumer for exercising any of the consumer rights contained in this chapter, including denying goods or service… (§ 715D.4.3., Iowa Code Annotated, Section 715D, An Act Relating to Consumer Data Protection, Providing Civil Penalties, and Including Effective Date Provisions)
  • Nothing in subsection (1) or (2) may be construed to require a controller to provide a product or service that requires the personal data of a consumer that the controller does not collect or maintain or prohibit a controller from offering a different price, rate, level, quality, or selection of goo… (§ Section 7. (3), Montana Consumer Data Privacy Act)
  • Nothing in subsection (1) or (2) may be construed to require a controller to provide a product or service that requires the personal data of a consumer that the controller does not collect or maintain or prohibit a controller from offering a different price, rate, level, quality, or selection of goo… (§ Section 7. (3), Montana Consumer Data Privacy Act 2023)
  • Nothing in this section shall be construed to require a controller to provide a product or service that requires the personal data of a consumer which the controller does not collect or maintain, or prohibit a controller from offering a different price, rate, level, quality or selection of goods or … (§ 507-H:6 II., New Hampshire Statutes, Title LII, Chapter 507-H, Expectation of Privacy)
  • Require a controller to provide a good or service that requires personal data from a consumer that the controller does not collect or maintain; or (Section 5 (3)(a), 82nd Oregon Legislative Assembly, Senate Bill 619)
  • Require a controller to provide a good or service that requires personal data from a consumer that the controller does not collect or maintain; or (Section 5 (3)(a), 82nd Oregon Legislative Assembly, Senate Bill 619)
  • Not process personal information in violation of state and federal laws that prohibit unlawful discrimination against consumers. A controller shall not discriminate against a consumer for exercising the consumer rights contained in this part, including denying goods or services, charging different p… (§ 47-18-3204.(a)(5), Tennessee Code Annotated, Title 47, Chapter 18, Parts 3201 through 3213, Tennessee Information Protection Act)
  • Not process personal information in violation of state and federal laws that prohibit unlawful discrimination against consumers. A controller shall not discriminate against a consumer for exercising the consumer rights contained in this part, including denying goods or services, charging different p… (§ 47-18-3204.(a)(5), Tennessee Code Annotated, Title 47, Chapter 18, Parts 3201 through 3213, Tennessee Information Protection Act)
  • Subsection (b)(3) may not be construed to require a controller to provide a product or service that requires the personal data of a consumer that the controller does not collect or maintain or to prohibit a controller from offering a different price, rate, level, quality, or selection of goods or se… (§ 541.101 (c), Texas Business and Commercial Code, Title 11, Subtitle C, Chapter 541, Subchapter A, Section 541)
  • A controller is not required to provide a product, service, or functionality to a consumer if: (13-61-302 (5), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • the consumer's personal data are or the processing of the consumer's personal data is reasonably necessary for the controller to provide the consumer the product, service, or functionality; and (13-61-302 (5)(a), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • provide the consumer's personal data to the controller; or (13-61-302 (5)(b)(i), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • allow the controller to process the consumer's personal data. (13-61-302 (5)(b)(ii), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • A controller is not required to provide a product, service, or functionality to a consumer if: (13-61-302 (5), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • the consumer's personal data are or the processing of the consumer's personal data is reasonably necessary for the controller to provide the consumer the product, service, or functionality; and (13-61-302 (5)(a), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • provide the consumer's personal data to the controller; or (13-61-302 (5)(b)(i), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • allow the controller to process the consumer's personal data. (13-61-302 (5)(b)(ii), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • Not process personal data in violation of state and federal laws that prohibit unlawful discrimination against consumers. A controller shall not discriminate against a consumer for exercising any of the consumer rights contained in this chapter, including denying goods or services, charging differen… (§ 59.1-578.A.4., Code of Virginia Title 59.1, Chapter 53, Consumer Data Protection Act, April 11, 2022)