CCAP Privacy Policy

The California Cannabis Control Appeals Panel (CCAP) is committed to the fair and transparent resolution of appeals from licensing decisions issued by the Department of Cannabis Control, and supports the free flow of information necessary to achieve those ends. CCAP is also committed to promoting and protecting the privacy rights of individuals, as enumerated in Article 1 of the California Constitution, the Information Practices Act of 1977, and other state and federal statutes.

It is the policy of CCAP to limit the collection and safeguard the privacy of personal information collected or maintained by CCAP in the course of resolving appeals. CCAP’s information management practices are consistent with the Information Practices Act (Civil Code Section 1798 et seq.), the Public Records Act (Government Code Section 6250 et seq.), Government Code Sections 11015.5 and 11019.9, and with other applicable laws pertaining to information privacy.

CCAP follows these principles in collecting and managing personal information:

  • We collect personal information on individuals only as allowed by law. Personal information, as defined in the Information Practices Act, is information that identifies or describes an individual including name, social security number, physical description, home address, home telephone number, education, financial matters, and medical or employment history. CCAP limits the collection of personal information to what is relevant and necessary to accomplish its lawful purpose. For example, we need to know a licensee’s name, email address, physical address, and telephone number, among other things, to initiate an appeal before CCAP.
  • We do not collect home, business or e-mail addresses, or account information from persons who simply browse the CCAP website. The information that we automatically collect includes your domain name or Internet Protocol (IP) address, the type of browser and operating system you used, the date and time you visited the website, which CCAP pages you visited, and any forms you downloaded. Cookies are simple text files stored on your computer by your Web browser. We do not use cookies to collect or store personal information. We collect personal information about you through our website only if you provide it to us voluntarily through email, form submissions, or surveys.
  • We tell people who provide personal information to CCAP the purpose for which the information is collected. We tell persons who are asked to provide personal information about the general uses that we will make of that information. We do this at the time of collection. With each request for personal information, we provide information on the authority under which the request is made, the principal uses we make of the information and the possible disclosures we are obligated to make to other government agencies and to the public.
  • We tell people who provide personal information about their opportunity to review that information. CCAP allows individuals who provide personal information to review the information and contest its accuracy or completeness.
  • We use personal information only for the specified purposes unless we get the consent of the subject of the information, or unless required by law or regulation. The Public Records Act exists to ensure that government is open and that the public has a right to have access to appropriate records and information possessed by state government. The CCAP appeals process is public, and as a result, certain personal information provided by the parties to an appeal must be made available to the public. At the same time, there are exceptions in both state and federal law to the public's right to access public records. These exceptions serve various needs including maintaining the privacy of individuals. In the event of a conflict between this Policy and the Public Records Act, the Information Practices Act, or other law governing the disclosure of records, the applicable law will control.
  • We use information security safeguards. We take reasonable precautions to protect the personal information on individuals collected or maintained by CCAP against loss, unauthorized access, and illegal use or disclosure. On the CCAP website, we protect the security your personal information during transmission by using Secure Sockets Layer (SSL) software, which encrypts the information you type in. Personal information is stored in secure locations. Our staff is trained on procedures for the release of information, and access to personal information is limited to those staff whose work requires it. Confidential information is destroyed according to the CCAP's records retention schedule. CCAP also conducts periodic audits to ensure that proper information management policies and procedures are being followed.
  • We will provide additional explanations of our privacy policy if requested. If you have further questions about the CCAP's privacy policy, you may email us at appeals@ccap.ca.gov.