Tue, Jan 7, 2020
The new California data protection law, named the California Consumer Privacy Act (CCPA), went into effect on January 1, 2020, bringing a wealth of changes for both consumers and businesses. The law deals directly with how companies collect, store, and handle consumer information. For California consumers, the law provides greater transparency into how their data is used and offers options to opt-out of certain data practices.
The CCPA applies to all California consumers, regardless of where the companies they deal with are headquartered or whether their business transactions take place on or offline. Any company handling the personal information of Californians are subject to the new rules. The CCPA’s definition of personal information includes:
Among the many effects it has for consumers:
For businesses, the penalties can be stiff -- $2,500 per violation or up to $7,500 per intentional violation.
The consumer privacy act is expected to affect businesses in several ways. They will now need to:
To a certain extent, content personalization for sites like Facebook, Google, or Amazon depends upon the use of consumer data. These sites – many of which happen to based in California’s Silicon Valley – will require visible links for consumers to request their data or direct companies not to sell it, updates to the terms of service pages, and internal processes to handle the retrieval and response of consumer data requests.
After seeing how the similar General Data Protection Regulation (GDPR) unfolded in the EU, we can expect the CCPA to be the first of many consumer data privacy regulations at the state and federal level. By working with Kroll Settlement Administration, an award-winning class action claims administrator, businesses and counsel can proactively avoid obstacles, reduce fraud risk, and get their legal matters resolved as expeditiously as possible. Contact us for more details.
Kroll is the leader in complex settlement administration providing end-to-end expertise for class actions, mass torts, and regulatory and government administrations.
End-to-end notice and administration solutions for data breach and privacy matters.