The California Consumer Privacy Act (CCPA) is a complicated, confusing and comprehensive state privacy law that impacts most marketing research and data analytics companies and departments, and covers almost all consumer data, online or otherwise. CCPA requires extensive disclosure about data collection, use and sharing, and consumer rights to data access, deletion and opt out (from data sharing/sale). It also further expands penalties for data security breaches, punishable by private lawsuits. The California Attorney General has wide latitude to enforce the law.
In 2023, CCPA will be modified and superceded by the California Privacy Rights Act (CPRA) and the California Privacy Protection Agency (CPPA) will take over regulation and enforcement.
Links to the law and regulations:
Disclaimer: The information provided by the Insights Association is for informational purposes only and not for the purpose of providing legal advice. Please contact your attorney to obtain advice on specific issues or questions.