The California Consumer Privacy Act (CCPA) comes into force today, the first comprehensive consumer privacy law in the United States.
Key points
- Consumers gain rights to know what personal information is collected, to request deletion and to opt out of its sale.
- Businesses must provide privacy notices and a “Do Not Sell My Personal Information” link where relevant.
- A private right of action applies to certain data breaches caused by a failure to maintain reasonable security.
- The Attorney General will begin enforcement from 1 July 2020.
The CCPA applies to businesses outside California, including in the UK, that meet its thresholds and handle Californians’ personal information.
Source: California Consumer Privacy Act, AB 375 (California Legislative Information)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
