California Passes Consumer Privacy Act

On Thursday, June 28, 2018, Governor Jerry Brown signed into law the California Consumer Privacy Act of 2018 (the "CCPA"), which may significantly impact many companies that collect and monetize personal data from California residents. Among other things, the law, which applies only to the data of California residents ("consumers"), would require companies to give consumers information about what data they collect and sell, as well as to delete data about consumers if requested in some circumstances. If the company sells data about consumers, the law would also permit consumers to opt out of that practice. Additionally, in some contexts, the CCPA would provide consumers with a private right of action in the event their data is subject to an unauthorized access, theft, or disclosure as the result of the company's failure to implement and maintain "reasonable security procedures." The CCPA is scheduled to come into effect on January 1, 2020, and, given the length of time