The landmark California Consumer Privacy Act (CCPA) requires certain companies doing business in California to implement new consumer privacy rights and provide new privacy policies to consumers. Even though the California attorney general’s right to enforce the law began July 1, 2020, the CCPA regulations did not become final and effective until August 14, 2020.
Now that the regulations are final, affected businesses must finalize their CCPA compliance programs if they have not already done so. However, it is important to note that the act is still undergoing changes, including a pending ballot initiative (the California Privacy Rights and Enforcement Act of 2020 (CPREA)) and AB 1281, which extends employment and business-to-business exemptions. Here are some key takeaways of what companies need to know to navigate the ongoing changes, manage potential enforcement actions, and create an effective compliance program.
If you're interested in Data Privacy and Protection Boot Camp, we invite you to subscribe to Morgan Lewis publications to receive updates on trends, legal developments, and other relevant areas that may be of interest to you.