On June 28, 2018, California passed the California Consumer
Privacy Act of 2018 (CCPA), establishing the strictest data privacy
law in the United States. It includes the consumers' right to
know what personal information is collected and the purposes for
which this information will be used, to whom this information is
sold or disclosed, the right to opt out of the sale of personal
information, and the right to access their personal information and
(with some exceptions) to delete their personal information. It
also includes the right to bring a private right of action seeking
either statutory or actual damages in the event the consumer's
information is subject to unauthorized access, theft or disclosure
as a result of a business' violation of its duty to implement
and maintain reasonable security measures. Businesses covered by
CCPA must work toward meeting the stringent requirements of this
new law before its effective date of January 1, 2020.
