---
title: "Compare a privacy-notice draft with the notice-at-collection duties"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/compare-a-privacy-policy-draft-with-the-oaic-s-app-1-chapter/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A25-B15-2-US"
practice_area: "Privacy, Data Protection & Cyber"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# Compare a privacy-notice draft with the notice-at-collection duties

> Against each item in Civil Code section 1798.100(a), mark whether the draft contains a sentence the lawyer has highlighted, or whether that item is missing. Do not rewrite the notice.

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/compare-a-privacy-policy-draft-with-the-oaic-s-app-1-chapter/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Against each item in Civil Code section 1798.100(a), mark whether the draft contains a sentence the lawyer has highlighted, or whether that item is missing. Do not rewrite the notice. |
| What the lawyer must review | Section 1798.100(a) requires the categories, the purposes, whether information is sold or shared, sensitive-information categories where relevant, and the retention period or the criteria, at or before collection. Subsection (c) requires collection to be reasonably necessary and proportionate to the disclosed purpose. The Attorney General's page states the consumer rights a notice has to be able to support. There is no federal APP 1 chapter. You accept or reject every gap the comparison flags before the notice is published. Opinion 512: verify the draft rather than treating a gap list as sign-off. |
| Written for | United States |
| Applies to | [Compare a privacy-policy draft with the OAIC's APP 1 chapter](https://ailawframework.com/practice/privacy-data-protection-and-cyber/compare-a-privacy-policy-draft-with-the-oaic-s-app-1-chapter.md) |

## Checking plan

- What the AI does: Against each item in Civil Code section 1798.100(a), mark whether the draft contains a sentence the lawyer has highlighted, or whether that item is missing. Do not rewrite the notice.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- A missing heading is not by itself a violation. You read the draft against the current section.
- HIPAA and the Gramm-Leach-Bliley Act were not opened for this comparison.

## Sources

- [California Civil Code section 1798.100 (duties of businesses that collect personal information)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100.) (checked 2026-10-22)
- [California Attorney General: California Consumer Privacy Act (CCPA)](https://oag.ca.gov/privacy/ccpa) (checked 2026-10-22)
- [ABA Formal Opinion 512, Generative Artificial Intelligence Tools (29 July 2024)](https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf) (checked 2026-10-22)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*