Countdown to 2020: Are You Ready for the California Consumer Privacy Act to Go Live?
Peggy Daley, Walter Mix, David Kalat, and Amy Worley from BRG, along with Alan Friel and Stephanie Malaska from BakerHostetler, discussed the impending implementation of the California Consumer Privacy Act of 2018 (CCPA) and tips on what companies may need to do to comply with its far-reaching requirements.
On January 1, 2020, the CCPA will go into effect. Most companies collecting, using, sharing, or selling data regarding California residents are subject to the law, one of the toughest consumer privacy laws in the United States. Similar in scope to the EU's recently implemented General Data Protection Regulation (GDPR), the CCPA affords certain rights to consumers, including the rights to:
- Know what data is being collected about them and why
- Access, download, or transfer their personal information
- Compel companies to delete personal data that companies collected about them
The CCPA and a new privacy law passed in Nevada include "Do Not Sell" rights. Other states are considering comprehensive consumer privacy legislation.
- Current state of play and status of compliance efforts
- What enforcement may look like
- Liability and the risk of consumer class actions
- Exceptions and carve-outs
- Identifying what constitutes a "sale of personal information" under the CCPA and Nevada law
- Federal legislative efforts
- What companies need to be doing now to prepare for these new laws