An insurance company deploys a telematics-based AI model that sets auto insurance premiums based on real-time driving behavior. A regulator inquires about the model's compliance with the California Consumer Privacy Act (CCPA). Which CCPA concern is MOST relevant?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — you need to focus on what data the insurer collects and how it uses it, plus the right to opt out of automated profiling that significantly affects pricing. Real-time telematics used to set premiums falls right into those CCPA and CPRA concerns.
Full Explanation
The correct concern is the right to know what personal information is collected and used, and the right to opt out of automated profiling that significantly affects insurance pricing. Under CCPA, as amended by CPRA, California consumers have the right to know what personal information is collected and how it is used, and CPRA adds rights related to automated decision-making and profiling with significant effects. Real-time telematics data used for premium pricing falls squarely within these provisions. The opt-out-of-sale concern is less relevant because it applies specifically to sale to third parties, not to the company's own use. The anonymization requirement is incorrect because CCPA does not require anonymization of all training data. The geolocation-prohibition concern is incorrect because geolocation collection is not prohibited under CCPA, but consent and disclosure requirements apply.