The California law applies to your website if you are the operator of a commercial website that gathers "personally identifiable information" online. Any website that gathers personal information from California residents is subject to the law. This is yet another example of how California privacy laws establish a de facto national standard for the privacy practices of national companies.
1. Your policy does not describe how your gather, use and disclose personally identifiable information;
2. Your policy is not "conspicuously posted," in accordance with the statute's very specific standards; or
3. Your policy does not include an effective date.
Complying with the Online Privacy Protection Act is not particularly difficult, but it is very difficult if you aren't even aware that the statute applies to you …..