Rule 9
To be in force: May 13, 2027
Contact information of person to answer questions about processing
Every Data Fiduciary shall prominently publish on its website or app, and mention in every response to a communication for the exercise of the rights of a Data Principal under the Act, the business contact information of the Data Protection Officer, if applicable, or a person who is able to answer on behalf of the Data Fiduciary the questions of the Data Principal about the processing of her personal data.
Notes / Explanation
Criteria for 'Significant Data Fiduciaries' (SDF). If you have over 10 million users or handle sensitive biometric/health data, you likely qualify.