CCPA

CCPA or the California Consumer Privacy Act is a state statute intended to enhance privacy rights and consumer protection for residents of California, United States. The bill, AB 375, was passed by the California State Legislature and signed into law by Jerry Brown, the Governor of California, on June 28, 2018. The amendments to CCPA, under the bill AB 1355, were signed into law on October 11, 2019. The CCPA and the amendments went into effect on January 1, 2020.

Overview

The California Consumer Privacy Act (CCPA) is a law that allows any California consumer to demand to see all the information a company has saved on them, as well as a full list of all the third parties that data is shared with. In addition, the California law allows consumers to sue companies if the privacy guidelines are violated, even if there is no breach.

Rights under CCPA

Under the CCPA, consumers have the right to:

• Know what personal data is being collected about them.
• Know whether their personal data is sold or disclosed and to whom.
• Say no to the sale of personal data.
• Access their personal data.
• Request a business to delete any personal information about a consumer collected from that consumer.
• Not be discriminated against for exercising their privacy rights.

Impact on Businesses

The CCPA applies to any business, including any for-profit entity that collects consumers' personal data, which does business in California, and satisfies at least one of the following thresholds:

• Has annual gross revenues in excess of $25 million;
• Buys or sells the personal information of 50,000 or more consumers or households; or
• Earns more than half of its annual revenue from selling consumers' personal information.

Organizations are required to "implement and maintain reasonable security procedures and practices" in protecting consumer data.

See Also

• General Data Protection Regulation (GDPR)
• Data Protection Act 2018
• Privacy law
• Information privacy