California Consumer Privacy Act (CCPA) Metrics
Pursuant to the California Consumer Privacy Act (“CCPA”), LexisNexis Risk Solutions FL Inc.
and the LexisNexis Risk Solutions companies in scope of the CCPA (“LNRS,” “we,” “us” or“our”) compile certain metrics related to CCPA consumer requests for the previous calendar
year.
We responded to consumer requests consistent with the CCPA, which does not apply to certain
information, such as information made available from government records, certain data subject
to the Fair Credit Reporting Act (FCRA), Gramm-Leach-Bliley Act (GLBA) and certain otherlaws, and where its application is preempted by, or in conflict with, federal law or the UnitedStates or California Constitution.
We denied certain requests in whole or in part if i) we were unable to confirm the consumer’sidentity, ii) we were unable to connect the information submitted in the request with personal
information in our possession, iii) the consumer provided inaccurate or incomplete information,or iv) we otherwise fulfilled the request, but certain personal information was not subject to theCCPA.
The metrics below are for all CCPA consumer requests we received from January 1, 2023
through December 31, 2023.
Number of Requests to Know Received1: 46,083
Number of Requests to Know Fulfilled: 41,469
Number of Requests to Know Denied: 4,614
Mean Number of Days to Respond to Requests to Know: 7
Median Number of Days to Respond to Requests to Know: 5
Number of Requests to Delete Received: 7,834
Number of Requests to Delete Fulfilled2: 7,833
Number of Requests to Delete Denied3: 1
Mean Number of Days to Respond to Requests to Delete: 1
Median Number of Days to Respond to Requests to Delete: 1

1The metrics for the requests to know (received, fulfilled, and denied) include metrics for other types of requests, e.g., requests todelete, included with the request to know submission.
2

These requests were fulfilled, but we did not delete information that was exempt from the scope of the CCPA. Pursuant to Cal. Civ.
Code Sections 1798.145 and 1798.146, we responded to consumer requests consistent with the CCPA, which does not apply tocertain information we maintain, including information processed as authorized subject to the Fair Credit Reporting Act (FCRA),
information subject to the Gramm-Leach-Bliley Act (GLBA), protected health information collected by a business associate subject
to the Health Insurance Portability and Accountability Act (HIPAA), information processed pursuant to the Driver’s Privacy Protection
Act (DPPA), information processed pursuant to the California analogues of these laws and certain other laws, and where theCCPA’s application is preempted by, or in conflict with, federal law or the United States or California Constitution.
Requests to delete were denied because i) we were unable to confirm the consumer’s identity, ii) we were unable to connect theinformation submitted in the request with personal information in our possession, or iii) the consumer provided inaccurate orincomplete information.
3

Number of Requests to Opt-Out of Sale/Share Received: 22,459
Number of Requests to Opt-Out of Sale/Share Fulfilled: 22,458
Number of Requests to Opt-Out of Sale/Share Denied: 1
Mean Number of Days to Respond to Requests to Opt-Out: 1
Median Number of Days to Respond to Requests to Opt-Out: 1
Number of Requests to Correct Received: 35,269
Number of Requests to Correct Fulfilled: 33,671
Number of Requests to Correct Denied: 1,598
Mean Number of Days to Respond to Requests to Correct4: 49
Median Number of Days to Respond to Requests to Correct: 38
Number of Requests to Limit Received: 3,570
Number of Requests to Limit Fulfilled: 3,570
Number of Requests to Limit Denied: 0
Mean Number of Days to Respond to Requests to Limit: 1
Median Number of Days to Respond to Requests to Limit: 1

Issued: July 1, 2024
Corrected: October 1, 2024

4Any responses to requests provided outside of the standard 45-day period were extended by up to a total of 90 days as permitted
under the CCPA.

2