The second of the four core CCPA rights your privacy policy should explain is the right of consumers to request that you delete their personal data. This includes all of the data you would have disclosed to the consumer if they made a right to know request. However, there are broad exceptions to this right that permit businesses to keep data even after a consumer requests it to be deleted. We’ll review those exceptions in part 4 of our agenda when we cover how to respond to consumer requests.