Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 17 JULY 2018

California's Data Privacy Law: What It Is And How To Comply (A Step-By-Step Guide)

Dickinson Wright PLLC
Dickinson Wright PLLC
Contributor
Dickinson Wright PLLC

Dickinson Wright PLLC

Dickinson Wright is a full-service law firm with more than 550 lawyers, serving clients across the...

View firm profile
Explore more from Dickinson Wright PLLC

Just as U.S. companies were settling into the idea of the EU's General Protection Act, California just passed the California Consumer Privacy Act of 2018, Cal. Civ. Code §§ 1798.100 et seq...

United StatesPrivacy
Sara Jodka
Sara Jodka
Author LinkedIn connections

Just as U.S. companies were settling into the idea of the EU's General Protection Act (GDPR), California just passed the California Consumer Privacy Act of 2018, Cal. Civ. Code §§ 1798.100 et seq. (CCPA), which will require U.S. companies to implement a number of similar privacy initiatives, which will afford California residents unparalleled (in the United States) data privacy rights. The law takes effect on January 1, 2020, and the following summarizes the law, including who it applies to and how, and offers a step-by-step guide to compliance.

What Businesses Must Comply with the CCPA?

Subject to a number of exceptions, discussed below, the CCPA covers every "business" that collects and sells consumer "personal information" or discloses personal data for a business purpose.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

The Boss Is Watching. Now The Law Is Watching The Boss

California has established the first comprehensive regulations governing AI-powered employee monitoring, creating a new legal framework that extends from hiring through termination. As other states follow suit with their own monitoring restrictions, companies face a complex patchwork of requirements covering everything from bathroom surveillance to emotion detection, with significant enforcement mechanisms and liability risks attached to each jurisdiction's unique approach.
United StatesEmployment and HR
Dickinson Wright PLLC
Dickinson Wright PLLC
Article

The Hidden Immigration Risks Of Automatic Voter Registration

Foreign nationals visiting the DMV may unknowingly register to vote through automatic voter registration systems, creating serious immigration consequences years later during green card or citizenship applications. With expanded federal verification programs and stricter USCIS enforcement, employment-based immigrants and their families must understand how routine driver's license transactions can jeopardize their immigration status.
United StatesImmigration
Dickinson Wright PLLC
Dickinson Wright PLLC
Article

The FCC Reaches Deeper Into The Grid – And The Warehouse

The Federal Communications Commission has added foreign-produced power inverters and advanced robotic devices to its Covered List under national security determinations, immediately barring new equipment authorizations and creating compliance deadlines for manufacturers. Companies must now evaluate whether their products qualify as domestic end products under Federal Acquisition Regulation standards or pursue conditional approval pathways by January 1, 2028.
United StatesGovernment, Public Sector
Dickinson Wright PLLC
Dickinson Wright PLLC
Article

DEA Guidance On Timely Applicants For Schedule III Medical Marijuana

The Drug Enforcement Administration has issued critical guidance affecting state medical marijuana licensees who applied for federal registration under Schedule III rescheduling. A recent Order to Show Cause signals DEA's intent to deny applications from dual-purpose licensees who serve both medical and adult-use customers, while new guidance restricts which entities can transact with registered applicants.
United StatesCriminal Law
Dickinson Wright PLLC
Dickinson Wright PLLC
Article

The State Of AI Regulation In Healthcare: Still Complicated

As artificial intelligence tools become embedded in clinical care, diagnostics, and health insurance operations, healthcare organizations must navigate an evolving patchwork of federal oversight and state-specific AI regulations. With 21 states having enacted 33 healthcare-AI laws by the end of 2025 and 177 pending bills across 31 states in 2026, the regulatory landscape remains fragmented while federal agencies work to establish comprehensive standards. Understanding these overlapping requirements is criti
United StatesFood, Drugs, Healthcare, Life Sciences
Dickinson Wright PLLC
Dickinson Wright PLLC