AB 370 Compliance

California Assembly Bill 370 (AB 370) amended the California Online Privacy Protection Act (CalOPPA) by requiring businesses to disclose how they respond to Do Not Track signals. The law was effective January 1, 2014.

AB 370 requires companies to address:

  • How they respond to a browser signal such as Do Not Track (DNT), or any other mechanisms that provide consumers with the ability to exercise choice
  • Whether other parties may collect data through the website/online service

We already were meeting the minimum requirements set forth by AB 370 at the time of the effective date. We adhere to the new amendment by disclosing the following in our Privacy Policy:

  • What type of data is collected, how that data is used, and whether collected data is shared or transferred to third parties
  • What third parties, actively or passively are collecting data through a website or online service and the purpose of that collection
  • If data is being collected about a consumers online activity, then the privacy policy must include a link to a mechanism that offers consumers choice

You can access Bill.com's Privacy Policy by clicking the Privacy Policy link at the bottom of any page on the Bill.com website or in the Bill.com account. You can access it directly by clicking here.