Align with CCPA before January 1, 2020
Going into effect on the first day of 2020, the California Consumer Privacy Act (CCPA) brings a new host of requirements for companies in scope doing business in the Golden State – not just based in the state. The privacy act aims to give California residents more control over how companies collect and use their personally identifiable information (PII) by granting residents certain rights to see and control the PII that companies collect about them. Companies subject to the CCPA must comply with the data privacy law by creating mechanisms that allow California residents to exercise those rights. Among other rights, California consumers may request to:
» Know what personal information is being collected and why
» Request deletion of their personal information
» Request information about onward disclosures and, if applicable, the “selling” of their personal information
» Know the categories of third parties with whom their data is shared, as well as those from whom their data was acquired
Enforcement and litigation risks for non-compliance could be severe. The CCPA allows the state to seek civil monetary penalties for each infraction, and it also allows consumers to file their own civil litigation seeking damages arising from certain personal information breaches.
Could CCPA Apply to Me?