California Enacts Sweeping Consumer Privacy Law

On June 28, 2018, California enacted the California Consumer Privacy Act of 2018 (CCPA), a sweeping privacy law that provides consumers with broad notice, access, and deletion rights concerning many types of personal information and permits consumers to opt-out of the sale of their personal information. The law, introduced and passed within a week in order to head off an even stronger ballot initiative, takes effect on January 1, 2020, and applies to the hundreds of thousands of businesses above certain size thresholds that do business in California and that collect, sell, or disclose for business purposes consumers' personal information.¹

Key Provisions

The CCPA's key provisions include: