On January 1, 2020, the California Consumer Privacy Act (CCPA or the “Act”) became effective. At a high level, the CCPA gives California residents, with certain exceptions, new rights to know what types of personal information a business collects about them, information about the business’s data collection practices, the ability to request access to and deletion of personal information the business maintains about them, and, if applicable, the ability to request that a business not sell personal information about the individual. The law also affects service providers to businesses and certain third parties that receive personal information from a business. While implementing regulations proposed by the California Attorney General have not yet been finalized, enforcement nevertheless is scheduled to begin July 1, 2020 and organizations subject to the law should be working on their compliance program (if that work has not already been completed).
To read the full alert my colleague Kevin Coy and I wrote, click here.