As a thriving business, you are surely aware of the different data protection laws in place; however, did you know that a new privacy law was just put into place, and it’s a big one? California has introduced the California Consumer Privacy Act (CCPA) and expects companies to become compliant before 2020.
Does CCPA Affect you?
The CCPA does not affect all businesses; however, you will be affected if your business:
- Operates for a profit
- Does business in California
- Collects consumer data
And at least one of these:
- Makes more than $25 million in annual revenue
- Holds the personal information of 50,000 or more consumers, households, or devices
- Earns more than half of its income by selling the personal data of consumers
If your business is already compliant with the GDPR and CalOPPA, then you shouldn’t have too much work to do in becoming CCPA compliant.
Here are a few of the key differences:
- The CCPA expands the definition of personal data to include undisclosed website activity logs, even if they don’t involve IP addresses.
- It requires that an individual under the age of 16 must provide opt-in consent for their personal information to be sold, while children under the age of 13 must provide valid parental consent.
- The CCPA does not require the establishment of legal basis or consent to collect data.
- It only allows consumers to object to the sale of their data to third-parties.
Now that you are aware of this privacy policy and what it means for you, be sure to update your policies for compliance. Check out this link for more information on CCPA. Businesses can be fined up to $7,500 per infraction if they don’t comply by January 2020; and keep in mind that per infraction means – per person! So, if you want to avoid an enormous fine, implement these new changes ASAP. We highly recommend being transparent with the information your company is collecting. Share your privacy policy on your company website, list the consumer rights, and describe how to exercise consumer rights.
