Legal

The CCPA is a new California privacy regulation that goes into effect on January 1, 2020.

The CCPA creates new rights to California consumers:

• The right to know what personal information is collected, used, shared or sold, both as to the categories and specific pieces of personal information; 
• The right to delete personal information held by businesses and by extension, a business’s service provider; 
• The right to opt-out of sale of personal information. Consumers are able to direct a business that sells personal information to stop selling that information. Children under the age of 16 must provide opt in consent, with a parent or guardian consenting for children under 13. 
• The right to non-discrimination in terms of price or service when a consumer exercises a privacy right under CCPA. 

The CCPA imposes new obligations for covered businesses:

• Businesses subject to the CCPA must provide notice to consumers at or before data collection. 
• Businesses must create procedures to respond to requests from consumers to opt-out, know, and delete.
  • For requests to opt-out, businesses must provide a “Do Not Sell My Info” link on their website or mobile app. 
• Businesses must respond to requests from consumers to know, delete, and opt-out within specific timeframes.
• Businesses must verify the identity of consumers who make requests to know and to delete.

We are in the process of evaluating the new requirements created by the CCPA and ongoing regulatory developments. We will be posting more information regarding the CCPA Privacy Notice once the California Attorney General completes its rule making process for adopting regulations to further the CCPA’s purpose.