The California Consumer Privacy Act (CCPA) is a state statute intended to enhance privacy rights and consumer protection for residents of California. Here are key points about the CCPA:
Overview
- Enactment: The CCPA was signed into law on June 28, 2018, by Governor Jerry Brown.
- Effective Date: The law became effective on January 1, 2020, with regulations finalized by the California Attorney General on August 14, 2020.
- Amendments: The California Privacy Rights Act (CPRA) was passed as Proposition 24 in November 2020, which amends and expands the CCPA. It will take full effect on January 1, 2023.
Key Provisions
- Consumer Rights:
- Right to know what personal data is being collected about them.
- Right to delete personal information held by businesses.
- Right to opt-out of the sale of personal information.
- Right to non-discrimination for exercising their CCPA rights.
- Right to access their personal information.
- Right to data portability.
- Applicability: Applies to for-profit businesses that collect consumers' personal information, determine the means of processing personal information, do business in California, and meet at least one of the following thresholds:
- Annual gross revenues in excess of $25 million.
- Annually buy, sell, or share personal information of 50,000 or more consumers, households, or devices.
- Derive 50 percent or more of annual revenues from selling consumers' personal information.
- Enforcement: The California Attorney General has the authority to enforce the CCPA, with penalties for non-compliance potentially reaching up to $7,500 per intentional violation.
Impact and Challenges
- The CCPA has set a precedent for other states to follow, potentially influencing federal privacy legislation.
- Compliance has been challenging for businesses, especially in terms of defining what constitutes "selling" data and managing consumer requests.
- The act has led to an increase in consumer awareness and demand for transparency in data practices.
Future Developments
- With the CPRA, there will be the establishment of the California Privacy Protection Agency to enforce the CCPA and its amendments.
- Further regulations and guidelines are expected to clarify ambiguities and expand on the rights provided by the CCPA.
External Links
Related Topics