US States Increasing Regulation Of Personal Information

As of January 1, 2023, the California Consumer Privacy Act (“CCPA”) now affects the personal data of not only consumers but also employees and individuals in their capacity as commercial contacts. The amended CCPA now also includes the right of a data subject to correct the data a business holds concerning them and to limit the disclosure and use of certain kinds of “sensitive personal information.” These rights are in addition to the CCPA's rights to disclosure of personal information held about the data subject, to have a business delete the data subject's information, to opt out of third-party sales, to be protected from discrimination based on the exercise of CCPA rights, and the right to sue in the event of a data breach.