89090
. (a) The trustees, alumni associations, and auxiliary
organizations may distribute the names, addresses, and electronic
mail addresses of alumni of the California State University to a
business as described in subdivision (b), in order to accomplish any
or all of the following:
(1) To provide those persons with informational materials relating
to the university and its programs and activities.
(2) To provide those persons, the trustees, the alumni
associations, and the auxiliary organizations with commercial
opportunities that provide a benefit to those persons, or to the
trustees, alumni associations, or auxiliary organizations.
(3) To promote and support the educational mission of the
university, the trustees, the alumni associations, or the auxiliary
organizations.
(b) The disclosures authorized in subdivision (a) shall be
permitted only if all of the following requirements are met:
(1) (A) The trustees, the alumni associations, or the auxiliary
organizations have a written agreement with a business, as defined in
subdivision (a) of Section 1798.80 of the Civil Code, that maintains
control over this data that requires the business to maintain the
confidentiality of the names, addresses, and electronic mail
addresses of the alumni, that requires that the California State
University retain the right to approve or reject any purpose for
which the private information is to be used by the business, and to
review and approve the text of mailings sent to alumni pursuant to
this section, and that prohibits the business from using the
information for any purposes other than those described in
subdivision (a). The text of a mailing intended to be sent to alumni
pursuant to this section shall not be approved by the trustees, the
affected alumni association, or the affected auxiliary organization
unless and until the mailing conspicuously identifies the university,
the alumni association, or the auxiliary organization as associated
with the business described in the mailing.
(B) If an affinity partner, as defined in Section 4054.6 of the
Financial Code, sends any message to any electronic mail address
obtained pursuant to this section, that message shall include at
least both of the following:
(i) The identity of the sender of the message.
(ii) A cost-free means for the recipient to notify the sender not
to electronically transmit any further message to the recipient.
(2) The trustees, an alumni association, or an auxiliary
organization shall not disclose to, or share alumni nonpublic
personal information with, a business, as defined in paragraph (1),
unless the institution, association, or organization has clearly and
conspicuously notified the alumnus, pursuant to subdivision (c), that
the nonpublic personal information may be disclosed to the business
and that the alumnus has not directed that the nonpublic personal
information not be disclosed.
(3) The disclosure of alumni names, addresses, and electronic mail
addresses does not include the names, addresses, and electronic mail
addresses of alumni who, pursuant to subdivision (c) or in another
manner, have directed the trustees, an alumni association, or an
auxiliary organization not to disclose their names, addresses, or
electronic mail addresses.
(4) No information regarding either of the following is disclosed:
(A) The current students of the California State University.
(B) An alumnus who, as a student at a campus of the California
State University, indicated that, pursuant to the federal Family
Educational Rights and Privacy Act (Public Law 93-380), he or she did
not wish his or her name, address, and electronic mail address to be
disclosed.
(c) (1) The trustees, the affected alumni association, or the
affected auxiliary organization shall satisfy the notice requirements
of subdivision (b) if it uses the form set forth in paragraph (2).
The form set forth in this subdivision or a form that complies with
subparagraphs (A) to (J), inclusive, shall be provided by the
trustees, the alumni association, or the auxiliary organization to
the alumnus as required in this subdivision, and shall describe the
nature of the information the alumnus would receive should the
alumnus choose not to opt out, so that the alumnus may make a
decision and provide direction to the trustees, the alumni
association, or the auxiliary organization regarding the sharing of
his or her name, address, and electronic mail address:
(A) The form uses the title "IMPORTANT PRIVACY CHOICE" and the
header, if applicable, as follows: "Restrict Information Sharing With
Affinity Partners."
(B) The titles and headers in the form are clearly and
conspicuously displayed, and no text in the form is smaller than
10-point type.
(C) The form may be provided as a separate document, incorporated
into another communication piece intended for the target audience, or
through a link to the form located on the Internet Web site of the
trustees, the affected alumni association, or the affected auxiliary
organization. If the form is provided through a link to an Internet
Web page, it shall be accompanied by the title "IMPORTANT PRIVACY
CHOICE" and a clear and concise description of the choice that can be
made by accessing the form. This requirement may be met by using
text materially similar to the first paragraph of the form set forth
in paragraph (2).
(D) The choice or choices provided in the form are stated
separately, and may be selected by checking a box.
(E) The form is designed to call attention to the nature and
significance of the information in the document.
(F) The form presents information in clear and concise sentences,
paragraphs, and sections.
(G) The form uses short explanatory sentences (an average of 15 to
20 words) or bullet lists whenever possible.
(H) The form avoids multiple negatives, legal terminology, and
highly technical terminology whenever possible.
(I) The form avoids explanations that are imprecise and readily
subject to different interpretations.
(J) The form is not more than one page.
(2) The form reads as follows: