If you are doing business in California, the way you handle
personal data could soon change in significant ways. The California
Consumer Privacy Act (“CCPA”) goes into effect on
January 1, 2020, and the time to start preparing
is now.
The CCPA applies to for-profit companies that do business in the
State of California, and either:
- Have annual revenue exceeding
$25,000,000;
- Handle the personal information of
50,000 or more California consumers; or
- Derive 50% of more of their annual
revenue from selling California consumers’ personal
information.
The CCPA does not explain what it means to “do business in
California,” but based on how that phrase is defined
elsewhere in California law, it will likely extend to companies
that offer goods or services to people or entities in California,
regardless of where those companies are physically located.