The CPPA And Federal Preemption Of State Data Privacy Laws?

Without a federal consumer data privacy law construct, legislators from several states have been promulgating their own, individual regulations. Of the five states that have comprehensive laws on the books (California, Colorado, Connecticut, Virginia and Utah), California was the pioneer, the first to enact a state consumer privacy law when it passed the California Consumer Privacy Act ("CCPA") in 2018. In a nutshell, the CCPA gives consumers more control over the personal information that businesses collect about them. The California law and accompanying regulations (yet to be finalized), now enforced by the California Privacy Protection Agency ("CPPA"), provide strict, extensive protections for consumers in the State of California. The CPPA is now concerned about the potential reach of the long-awaited, federal consumer data privacy legislation now before Congress.