California Privacy Policy

Effective Date:  March 1, 2022

This Policy applies to the Federated Challenge an annual event organized by the Federated Insurance Foundation Inc., (“Federated Challenge”), defined as a “business” pursuant to the California Consumer Protection Act (“CCPA”).  This California Privacy Policy (“CCPA Policy”) only applies to California consumers.  California consumers (“consumers”) are persons who are California residents.  This CCPA Policy only applies to consumers’ whose Personal Information is collected, used or disclosed by Federated Challenge.  Personal Information is defined below.  Any other terms defined in the CCPA have the same meaning when used in this CCPA Policy.

This CCPA Policy describes Federated Challenge’s business practices, both online and offline, regarding:

  • The collection, use, and disclosure of consumers’ Personal Information, and;
  • The rights of consumers regarding their own Personal Information.

NOTE:  Federated Challenge does not sell consumers’ Personal Information.  Federated Challenge does not sell the Personal Information of minors under 16 years of age without affirmative authorization. 

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Personal Information does not include:

  • Publicly available information from government records.
  • De-identified or aggregated consumer information.
  • Information excluded from the CCPA’s scope, like:
    • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
    • Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
  1. Right to Know

Consumers have the right to request that Federated Challenge disclose certain Personal Information Federated Challenge has collected about them during the last 12 months.  Federated Challenge will not disclose any Personal Information unless it receives a Verifiable Consumer Request (Information on how to complete a Verifiable Consumer Request is found below*).  Consumers have the right to request the following:

  • Categories of Personal Information Federated Challenge has collected about the consumer.
  • Categories of sources from which the Personal Information is collected.
  • The business or commercial purpose for collecting Personal Information.
  • Categories of third parties to whom Personal Information was disclosed for a business purpose.
  • Categories of Personal Information that Federated Challenge disclosed for a business purpose about the consumer.
  • Specific pieces of Personal Information that Federated Challenge has about the consumer.
  1. Right to Request Deletion

Consumers have the right to request that Federated Challenge delete any of their Personal Information that Federated Challenge collected from them and retained, subject to certain exceptions. Once Federated Challenge receives a Verifiable Consumer Request - and separately confirms the Verifiable Consumer Request to delete- Federated Challenge will delete (and direct its service providers to delete) the Personal Information from its records, unless an exception applies.  Information on how to complete a Verifiable Consumer Request to delete is found below.

Federated Challenge may deny a deletion request if maintaining the information is necessary for Federated Challenge to:

  1. Complete the transaction for which the Personal Information was collected, provide a good or service requested by the consumer, or reasonably anticipated within the context of Federated Challenge’s ongoing business relationship with the consumer, or otherwise perform a contract between Federated Challenge and the consumer.

  2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.

  3. Debug to identify and repair errors that impair existing intended functionality.

  4. Exercise free speech, ensure the right of another consumer to exercise their right of free speech, or exercise another right provided for by law.

  5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).

  6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when Federated Challenge’s deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent.

  7. Enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with Federated Challenge.

  8. Comply with a legal obligation.

  9. Make other internal and lawful uses of that information that are compatible with the context in which the consumer provided it.

  1. Exercising Right to Know and Right to Delete

To exercise the right to know and right to delete described above, please submit a Verifiable Consumer Request to Federated Challenge by either:

Only the consumer or an Authorized Agent may make a Verifiable Consumer Request related to their Personal Information.  An “Authorized Agent” is a person or business entity registered with the California Secretary of State to conduct business in California that a consumer has authorized to act on their behalf or an individual granted authority under a written power of attorney issued pursuant to California Probate Code sections 4121 to 4130.  If an Authorized Agent is making the request and has not provided a power of attorney, Federated Challenge must receive:

  1. Proof that the consumer gave the Agent signed permission to make the request;


  1. The consumer must also directly confirm with Federated that they provided permission for the Agent to act on the consumer's behalf.

Consumers may only make a Verifiable Consumer Request for access or deletion twice within a 12-month period. The Verifiable Consumer Request must: 

  • Provide sufficient information that allows Federated Challenge to verify, to a reasonably high degree of certainty, that the requestor is the consumer about whom Federated Challenge collected Personal Information or an Authorized Agent.

  • Describe the request with sufficient detail to allow Federated Challenge to properly understand, evaluate, and respond to it.

NOTE: Completing as much information as possible on the Verifiable Consumer Request form will make it more likely that Federated Challenge will be able to provide a substantive response.

Federated Challenge will attempt to match data provided in the Verifiable Consumer Request to data that Federated Challenge maintains on the consumer.  Federated Challenge will require a declaration under penalty of perjury, swearing that the requestor is the consumer or Authorized Agent whose Personal Information is the subject of the request.  If Federated Challenge cannot, to a reasonably high degree of certainty, verify a requestor’s identity or authority to make the request and confirm the Personal Information relates to the consumer, the request will be denied.  Federated Challenge will also deny a request made by an Authorized Agent if the Authorized Agent does not submit proof that they have been authorized by the consumer to act on their behalf and the consumer also directly confirms to Federated that they have given the Authorized Agent permission, as described above. If this happens Federated Challenge will state so in its response.

Making a Verifiable Consumer Request does not require the requestor to create an account with Federated Challenge. Federated Challenge will only use Personal Information provided in a Verifiable Consumer Request to verify the requestor’s identity or authority to make the request.

Federated Challenge will provide a response either by mail or electronically, at the requestor’s option.

  1. Verifiable Consumer Request Response and Timing

Federated will confirm receipt of a Verifiable Consumer Request within 10 days of receipt and, upon verification, provide a response within 45 days.  Federated may require an additional 45 days to verify and respond to some requests.  If more than 45 days are required, Federated will notify the requestor within the first 45 days, explaining the reason for the delay.

Federated will not charge a fee to process or respond to a Verifiable Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If Federated determines that the Request warrants a fee, it will inform the requestor of that decision.

  1. Non-Discrimination

Federated Challenge will not discriminate against a consumer because the consumer exercised any of the consumer’s rights under the CCPA. 

  1. Categories of Personal Information Federated has Collected in the Last 12 Months:

The categories of Personal Information Federated Challenge has collected about consumers over the past 12 months include the following:

  1. Personal Identifiers: such as a real name, signature, postal address, IP address, email address.
  2. Financial Identifiers: such as, bank account number, credit card number, debit card number, or any other financial information.
  3. Internet or other electronic network activity information, including, but not limited to, search history, and information regarding a consumer’s interaction with an Internet Web site, or application.
  1. Categories of Sources from Which Federated Challenge Has Collected the Categories of Personal Information Described Above:
  • Directly from the consumer: all categories of Personal Information.
  1. Business or Commercial Purposes For Which Federated Challenge Has Collected the Categories of Personal Information Described Above:
  • To assist Big Brothers Big Sisters fundraising through the Federated Insurance Foundation, a qualified public charity under section 501(c)(3) (tax ID# 23-7173646).

  • To provide products and services that are requested including , processing or fulfilling requests and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytic services, or providing similar services, and for Federated Challenge’s operational purposes which are reasonably necessary and proportionate to achieve the purpose for which the information was originally collected.

  • Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity.

  • Debugging to identify and repair errors that impair existing intended functionality.

  • Undertaking activities to verify or maintain the quality or safety of a service or product that is developed or provided by Federated Challenge, and to improve, upgrade, or enhance any service or product that is developed or provided by Federated Challenge.

  • Auditing related to a current interaction with a consumer and concurrent transactions including auditing for compliance with the CCPA and other standards.

  • Undertaking internal research for technological development and demonstration.

  • Undertaking activities to verify or maintain the quality of services and products owned or controlled by Federated Challenge and to improve, upgrade or enhance those services and products.

  • Advancing Federated Challenge’s lawful commercial or economic interests.

  1. Categories of Third Parties With Whom Federated Challenge Has Shared Personal Information Described Above:

Federated Challenge may share consumer Personal Information with a third party for a business or commercial purpose. When Federated Challenge discloses Personal Information for a business or commercial purpose, it enters into a contract that describes the purpose and requires the third party recipient to both keep the Personal Information confidential and not use it for any purpose except performing the contract.

Federated Challenge shares your Personal Information with the following categories of third parties:

  • Service Providers
  • Internet Service Providers
  1. Disclosures of Personal Information Described Above for a Business or Commercial Purpose:

Federated Challenge has disclosed the following categories of Personal Information to third parties in the preceding 12 months for a business or commercial purpose: 

  • All categories of Personal Information.

Federated Challenge has not sold any Personal Information to third parties for a business or commercial purpose in the preceding 12 months.

NOTICE:  Nothing in this CCPA Policy or the CCPA shall limit Federated Challenge’s ability to comply with applicable laws; comply with civil, criminal, or regulatory inquiries by federal, state or local authorities; cooperate with law enforcement concerning any potential violations of law; or otherwise exercise or defend legal claims.

This CCPA Policy may be printed as a separate document by utilizing your browser’s print function.

  1. Contact for More Information:

Persons with a disability can receive alternative formats of this CCPA Policy by contacting Federated Challenge below.  If a consumer has any questions or concerns about this CCPA Policy or any consumer rights under the CCPA, Federated Challenge can be contacted at:

California Notices:

This CCPA Policy was last updated:  March 1, 2022