The CCPA (which may still be amended by the time it comes into force) seeks to put privacy rules around larger tech companies and tech brokers or else California residents may sue them (though it is believed many states will follow suit).
The law comes into effect on January 1, 2020 but can reach back to January 1, 2019 so enterprises should already be reviewing their policies and procedures.
The purpose of the law is to protect consumers (the Bill actually references Cambridge Analytica’s misuse of data) by giving them transparency into what is collected and how/why the information is used or shared. Additionally, it should give consumers a way to opt out (without being treated differently such as to be given less access or diminished services if they have opted out).
The CCPA applies to the following types of companies:
- $25 Million or more in gross annual revenue
- have personal information on 50,000 or more consumers, households, or devices
- earns more than half its revenue from selling consumers’ personal information
You can find out more about the CCPA here: