Data Breaches And Damages: Consumer Action Under The CCPA

With less than one month to go before the California Consumer Privacy Act of 2018's ("CCPA") effective date of January 1, 2020, businesses should be aware of the potential litigation that awaits them.

The CCPA is a California privacy law that gives California consumers the rights to know about and control the personal information that businesses collect about them. In turn, the CCPA requires businesses to give consumers the ability to effectuate these rights. For a more in-depth review of the CCPA, please view our previous posts on our Privacy Law Blog.

Among the rights the CCPA endows on California consumers, is the right to bring an action for statutory damages if the consumer's information is subject to a data breach. This right, however, only applies to certain kinds of data breaches.