Now that the CCPA is in effect, some companies will need to
revise their policies.
The cyber insurance markets are beginning to adapt to the new
California Consumer Privacy Act (CCPA) which went into effect on
January 1.
There is great variation in how cyber insurance policies
currently address risks under the CCPA. And further developments
are expected as the law begins to impact companies under its
jurisdiction—that is, companies that, regardless of their
location, are for-profit, collect data from California residents,
and either have annual revenue of at least $25 million; or collect,
store and/or save the data of at least 50,000 California data
subjects; or realize at least half of their revenue from the sale
of data.
