California Passes New Privacy Law

As of January 1, 2020, organizations around the world who process personal data of California residents will be required to comply with the new provisions of the California Civil Code, as amended by the California Consumer Privacy Act of 2018 (the "Act"). The Act, which was passed on June 28, 2018, sets strict standards for the collection and processing of personal data of California residents.

Who and What Does the Act cover?

The Act covers the personal information of “consumers”, which is defined as any natural person who is a California resident. The term “personal information” is broadly defined as “any information that … relates to … a particular consumer or household.” An important exception to this broad definition is “publicly available information.” However, this exception does not include de-identified consumer information, aggregate consumer information, biometric information or data that is used for a purpose not compatible with the purpose for which