California
Country-Specific Privacy Addendum for California, last updated: 19 February 2026
This Country-Specific Privacy Addendum for California (“Addendum”) applies to all IDC customers and website visitors who are California consumers, as defined in and in compliance with the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020 (“CPRA”). The terms “personal data” and “personal information” are used interchangeably. This Addendum supplements the information contained in the Privacy Policy.
Under the CCPA, among other rights, California consumers have the right to:
- Request that a business that collects a consumer’s personal information disclose the categories and specific pieces of personal information that a business has collected about consumers.
- Request that a business corrects consumer’s personal information that is inaccurate.
- Request that a business delete any personal information about the consumer that a business has collected.
- Request that a business that sells or shares a consumer’s personal information, not sell or share the consumer’s personal information.
- Request that a business limits the use and disclosure of sensitive personal information collected about them.
Request categories and specific pieces of personal information we collect
The categories of personal information IDC has collected about consumers, the categories of sources from which personal information is collected, the business or commercial purpose for collecting or selling (if applicable) personal information, the categories of third parties with whom IDC shares personal information, and the specific pieces of personal information IDC has collected about consumers, can be generally be found in IDC’s privacy policy. IDC does not collect sensitive personal information, as defined under the CCPA.
Request correction of inaccurate personal information
Upon your request, IDC will correct your personal information that is inaccurate.
Request deletion
Upon your request, IDC will delete your personal information, and you will not receive any IDC products, content or services, unless you subsequently provide your personal information in connection with a new registration, or it is otherwise lawfully provided to IDC. Please note that your request may be denied if we need your personal information to fulfil our legal obligations and exercise or defend our legal claims.
Request to opt out of the sale and sharing of personal information
You have the right to opt out of the sale or sharing of your personal information, as defined in the CCPA.
IDC does not sell personal information, as defined in the CCPA.
IDC may share your personal information collected by cookies with third parties for the purpose of personalized advertising. You can opt out of such sharing in our cookie banner when you first visit the IDC website. If you want to update your cookie preferences, please see our cookie policy.
Please note that IDC also accepts opt-out preference signals (“OPS”) as valid opt-out requests. Such OPS are respected for both known and unknown users by default in a frictionless manner (without requiring specific OPS implementation). For known users, IDC applies the OPS to users’ accounts, browsers, and devices. For unknown users, the OPS are applied to the users’ current browsers and/or devices.
Response timeframes
IDC aims to respond to a verifiable consumer request within forty-five (45) calendar days of its receipt. If IDC requires more time (up to ninety (90) calendar days), IDC will inform you of the reason and extension period in writing.
Contact information
To exercise any of your rights under the CCPA or if you have any questions about this notice or IDC’s privacy practices, please contact us at:
Email: privacy@idc.com (please put “CCPA Request” in the subject line).Mail: IDC Research, Inc., Attn: Privacy Office, One Beacon Street, suite 33100, Boston, MA 02108