Increased regulation continues to be the trend in data privacy
law, with 2019 bringing forth a host of new regulations and
guidance on existing laws. This year, the pace will not likely
slow, with January 1, 2020, having marked the official arrival of
robust data privacy law in the United States as the California
Consumer Privacy Act (CCPA) came into effect.
Boards and management will need to continue to monitor the
evolving privacy compliance landscape to ensure that they are
considerate of privacy obligations and attendant risks when
implementing their business objectives and oversight going into
2020.
CCPA
In its 2019 session, the California legislature amended the CCPA
and the California Attorney General issued a set of regulations
that implement, clarify and impose new obligations under the CCPA.
Commentators expect that the law and regulations will be further
amended, but as of now, if the CCPA applies to your business,1
notable obligations include:
