# Privacy law compliance

Privacy laws differ across the world. Cabin attempts to abide by all known applicable laws as a result of our privacy-first data storage model.

# GDPR (Europe & UK)

General Data Protection Regulation (GDPR) (opens new window)) demands that data subjects may not be identifiable unless authorized.

"The data subjects are identifiable if they can be directly or indirectly identified, especially by reference to an identifier such as a name, an identification number, location data, an online identifier or one of several special characteristics, which expresses the physical, physiological, genetic, mental, commercial, cultural or social identity of these natural persons."

TIP

Cabin does does not allow personal identification, directly or indirectly. Cabin does not allow its data to "expresses the physical, physiological, genetic, mental, commercial, cultural or social identity of these natural persons."

# CCPA (California)

The CCPA takes the position that consumers “own” their privacy information and provides them five general “rights” for their personal information. Under the Act, California consumers will have the right:

  1. To know what personal information is collected about them

    TIP

    Cabin does not collect personally identifiable information

  2. To know whether and to whom their personal information is sold/disclosed, and to opt-out of its sale

    TIP

    Cabin does not sell data to anyone

  3. To access their personal information that has been collected

    TIP

    Cabin is not capable of identifying information related to a person

  4. To have a business delete their personal information

    TIP

    Cabin is not capable of identifying information related to a person. All data can be deleted by a Cabin user

  5. To not be discriminated against for exercising their rights under the Act

    TIP

    Cabin is not capable of identifying information related to a person therefore business owners cannot target individuals for discrimination

Personal information is information that identifies, relates to, or could reasonably be linked with you or your household. For example, it could include your name, social security number, email address, records of products purchased, internet browsing history, geolocation data, fingerprints, and inferences from other personal information that could create a profile about your preferences and characteristics.

TIP

Cabin's data model does not allow inferences to be made from personal information. Cabin does not use identifiers or fingerprints. Cabin does store country-level IP geolocation, but this is not related to any other data points.

Under CCPA, data collected by cookies count as personal information. While CCPA doesn’t require businesses to gain opt-in consent for cookies, it does require them to disclose what personal data is being collected by cookies and what is done with the data.

TIP

Cabin does not use cookies

CCPA (opens new window)

# DPA (France)

Regarding the use of trackers

  1. Users must provide free, informed, specific and unequivocal consent.

    TIP

    While trackers intended to generate traffic statistics are exempt from the DPA, Cabin does not use cookies, therfore does not require consent.

# PIPEDA (Canada)

Canada's Anti-Spam Legislation (CASL) requires that website and app operators get "express consent" for the installation of certain "computer programs." CASL deems that cookies are a type of computer program.

TIP

Cabin does not use cookies

# APP (Australia)

Australian law does not require the use of cookie consent pop-ups. Businesses who are subject to the APPs may be required to state the type of data collected and how it is used, stored and handled.

3.3 An APP entity must not collect sensitive information about an individual unless:

a. the individual consents to the collection of the information and:

i. if the entity is an agency — the information is reasonably necessary for, or directly related to, one or more of the entity’s functions or activities; or

ii. if the entity is an organisation — the information is reasonably necessary for one or more of the entity’s functions or activities;

TIP

Cabin does not use cookies. Cabin does not store personal information.

# PDPA (Argentina)

The use of cookies is not included in the legislation. Nevertheless, by application of the Data Protection principles, companies trying to obtain information through them must obtain the user's consent to collect information.

TIP

Cabin does not use cookies. User consent is not required.

# LGPD (Brazil)

Not only does the LGPD definition encompass data that can actually identify an individual independently, but it also includes any data that can be aggregated to another to identify the individual.

TIP

Cabin does not store personal information. Cabin cannot aggregate data to identify an individual.

# PPIA (South Africa)

Although POPIA does not expressly regulate how your organization can use cookies, they do fall under the term ‘online identifier.’ If cookies are used to collect personal data, POPIA requires that you disclose that information and provide an appropriate opt-in or opt-out feature.

TIP

Cabin does not use cookies or online identifiers. Cabin does not store personal information.

Last Updated: 10/8/2021, 12:18:26 PM