As a thriving business, you are surely aware of the different data protection laws in place; however, did you know that a new privacy law was just put into place, and it’s a big one? California has introduced the California Consumer Privacy Act (CCPA) and expects companies to become compliant before 2020.
Does CCPA Affect you?
The CCPA does not affect all businesses; however, you will be affected if your business:
- Operates for a profit
- Does business in California
- Collects consumer data
And at least one of these:
- Makes more than $25 million in annual revenue
- Holds the personal information of 50,000 or more consumers, households, or devices
- Earns more than half of its income by selling the personal data of consumers
If your business is already compliant with the GDPR and CalOPPA, then you shouldn’t have too much work to do in becoming CCPA compliant.
Here are a few of the key differences:
- The CCPA expands the definition of personal data to include undisclosed website activity logs, even if they don’t involve IP addresses.
- It requires that an individual under the age of 16 must provide opt-in consent for their personal information to be sold, while children under the age of 13 must provide valid parental consent.
- The CCPA does not require the establishment of legal basis or consent to collect data.
- It only allows consumers to object to the sale of their data to third-parties.