In 2018 California law makers approved regulation protecting consumer privacy, requiring business to disclose personal information collected similar to the European Union’s General Data Protection Regulation (GDPR). California Consumer Privacy Act (CCPA) went into affect January 1, 2020, however it will enforced beginning July 1, 2020. CCPA applies to any for profit business that operates in California and meets certain criteria: makes $25 million in annual revenue, collects data on more that 50,000 consumers, or makes more than half its revenue from consumer’s data.
What does this mean for consumers? A business that collects personal information must disclose the categories and specific personal information it has collected. As a consumer you have the right to request a business disclose the personal data they have collected of yours, how they have collected the information, their purpose for collecting personal information, whether they share your information to other parties, and request to opt out of the collection or sale of your personal information. A business must then verify your request and delivery your data they have collected for a 12 month period free of charge within 45 days. You can request the business delete the personal data of yours they have collected.
Applicable business must have an easily accessible link to their Privacy Policy on their website. Many websites also have implemented Cookies pop up notifications to disclose the use of Cookies. In short, Cookies are small pieces of data, stored in text files, that are stored on your computer or other device when websites are loaded in a browser. Cookies can be used for tracking behavior while you are using a website for analytics or are widely used to ‘remember’ you and your preferences, either for a single visit (through a ’session cookie’) or for multiple repeat visits (using a ‘persistent cookie’). Business must also provide a way for the consumer to submit their request for personal information, verify the requestor, take necessary steps to deliver on the request. Businesses are required to disclose how they secure personal information and what actions they will take in the case of a data breach.
Whether you are a consumer or business that meets the requirements, it’s in your best interest to be aware of this new regulation and know your rights protecting your personal information. This regulation makes great strides for consumers to know the whereabouts of their personal information and have the ability to opt out of sharing.
Last modified: July 6, 2020
