On January 1st, 2020 the California Consumer Privacy Act (CCPA) went effect for new consumer privacy rights. This empowers consumers with more power against larger businesses selling their data. Is your company affected by this new law, and if so, are you compliant?
This new law is designed to protect and educate California consumers in regards to their personal data obtained by businesses the consumer is directly involved with, and the right to know what that same business is doing with their data. This affects businesses outside of California and the US, if the consumer resides in California.
New Consumer Rights
CCPA gives California consumers the right to ask a business what personal data they are selling to third parties and to what third parties. If a consumer does not want their data sold off to a third party they will be able to deny that request with the company ensuring that data is never sold. The consumer also now has the right to request their personal data be deleted by the business and providers to that business. Businesses must respond and comply within a certain timeframe.
Businesses Affected
Businesses will now be subject to CCPA rules if they have an annual gross revenue of $25 million or more. If half of a business’ revenue is dependent upon selling consumers’ information, then they will also be subjected. Those who sell information on 50,000 consumers or more will also be required to comply with the new law.
For more information on whether your business is affected by the new California Consumer Privacy Act, read California’s factsheet.
