What specific data privacy law is mentioned in the Basecamp Fitness FDD?

According to Basecamp Fitness's 2025 Franchise Disclosure Document, franchisees must comply with data privacy laws, including the California Consumer Privacy Act (CCPA). Specifically, the FDD mentions Cal. Civ. Code Section 1798.100 et seq. Franchisees are also required to adhere to any privacy policies or data protection and breach response policies that Basecamp Fitness may establish.

This means that as a Basecamp Fitness franchisee, you must understand and implement measures to protect the personal information of members and customers in accordance with the CCPA. This includes providing notices about data collection practices, honoring consumer rights to access, delete, and opt-out of the sale of their personal information, and implementing appropriate security measures to prevent data breaches. Failing to comply with these regulations can result in significant fines and legal liabilities.

Furthermore, the FDD emphasizes that franchisees are responsible for notifying Basecamp Fitness immediately of any suspected data breaches and for promptly identifying and remediating the source of any security compromise at their own expense. Franchisees also assume responsibility for providing all notices of breach or compromise and monitoring credit histories and transactions of members and customers, unless otherwise directed by Basecamp Fitness. Therefore, it is crucial for prospective franchisees to consult with legal counsel to ensure full compliance with all applicable data privacy laws and regulations.