Cybersecurity, Privacy & Artificial Intelligence
| State | California |
|---|---|
| Law(s) | California Consumer Privacy Act (CCPA) with California Privacy Rights Act (CPRA) | Enacted: | June 28, 2018 | Effective: | Jan. 1, 2020 | Website: | California Legislative Information – California Consumer Privacy Act of 2018 |
Applicability Threshold
Does business in California
And at least one of the following:
- Controls or processes personal information of at least 100,000 consumers
- Annual gross revenues at least ($25million)
- Derive more than 50% of revenue from sale of personal data
Consumer Rights
Consumer has the right to access, correct and delete personal data
Opt-out:
- Targeted advertising/cross-contextual behavioral advertising
- Sale of personal data
- Profiling
Portability
Allows consumers the right to limit the use and disclosure of sensitive personal information
Notable Nuisances
Requires notice at collection of the personal information
Allows private right of action for certain violations