CALIFORNIA CONSUMER PRIVACY ACT
RESOURCES
The California Consumer Privacy Act (CCPA) of 2018
Text of the CCPA – The full text of the California Consumer Privacy Act (CCPA) of 2018 as updated by the California Privacy Rights Act (CPRA) of 2020.
Official Site for CCPA – The website for Californians for Consumer Privacy organization led by Alastair Mactaggart and Rick Arney, who were instrumental in the creation of the CCPA.
The California Consumer Privacy Act (CCPA) is a landmark privacy law that provides California residents with significant rights regarding their personal information. This resources page aims to offer comprehensive information about the CCPA, its implications, and how businesses and consumers can navigate its requirements.
What is the CCPA?
The CCPA was enacted in 2018 to enhance privacy rights and consumer protection for residents of California. It grants consumers several rights, including:
- Right to Know: Consumers can request information about the personal data a business collects, uses, and shares.
- Right to Delete: Consumers can request the deletion of personal information collected by businesses, subject to certain exceptions.
- Right to Opt-Out: Consumers can opt-out of the sale or sharing of their personal information.
- Right to Non-Discrimination: Consumers are protected from discrimination for exercising their CCPA rights.
The California Privacy Rights Act (CPRA), passed in 2020, further amended the CCPA, adding new rights such as the right to correct inaccurate information and limit the use of sensitive personal information.
What Are Key Features of the CCPA?
Scope and Applicability
The CCPA applies to businesses that meet certain criteria, such as having gross revenues over $25 million, buying or selling personal information of 50,000 or more consumers, or deriving 50% or more of annual revenues from selling consumers’ personal information.
Personal Information
Personal information under the CCPA includes any data that identifies, relates to, or could reasonably be linked with a particular consumer or household. This includes names, addresses, social security numbers, purchase histories, and internet activity, among others.
Consumer Rights
- Access: Consumers can request a copy of the personal information collected about them.
- Deletion: Consumers can request the deletion of their personal information.
- Opt-Out: Consumers can opt-out of the sale of their personal information.
- Correction: Under the CPRA, consumers can request corrections to inaccurate personal information.
- Limit Use: Consumers can limit the use and disclosure of sensitive personal information.
Business Obligations
Businesses must comply with several obligations under the CCPA, including:
- Notice: Providing clear and conspicuous privacy notices to consumers.
- Data Security: Implementing reasonable security measures to protect personal information.
- Training: Ensuring employees are trained on CCPA compliance.
- Handling Requests: Establishing processes to handle consumer requests regarding their rights under the CCPA.
Compliance and Enforcement
The California Attorney General enforces the CCPA, and businesses can face significant fines for non-compliance. The law requires businesses to implement robust privacy policies and practices to ensure compliance and protect consumer data.
Professor Solove’s Blog Posts and Interviews
California Privacy Law for the World: An Interview with Lothar Determann – In this blog post, Professor Daniel Solove interviews Lothar Determann, a leading expert on California privacy law who has a treatise on the topic: California Privacy Law (3rd Edition, IAPP 2018).
The California Consumer Privacy Act of 2018 – In this blog post, Daniel Solove discusses how in the period of just a week, California passed a bold new privacy law — the California Consumer Privacy Act of 2018. He highlights a few aspects of the law that he finds to be notable.
CPPA Training and Awareness
TeachPrivacy offers various resources to help businesses and individuals understand and comply with the CCPA:
California Consumer Privacy Act Training – This 15-minute course will help employees understand the key requirements of the CCPA, learn how to identify personal information under the CCPA, learn the rights that consumers have and how to direct consumers to exercise their rights, and understand the business’s responsibilities when collecting and transferring personal information.
California Consumer Privacy Act Whiteboard – The California Consumer Privacy Act (CCPA) summarized in just 1 page! This whiteboard covers Scope and Applicability, Personal Information, Individual Rights, Enforcement, and Responsibilities established by the CCPA.
California Consumer Privacy Act Training Guide – This guide by Daniel Solove discusses the CCPA’s training requirements and makes recommendations for how organizations can meet these requirements.
California Consumer Privacy Act Regulation Chart – This useful chart, created by Maggie Gloeckle, links CCPA provisions to the corresponding sections of the draft CCPA regulation.
CCPA FAQ – In this extensive documents, Professor Daniel Solove walks through the Act and explains what the CCPA is, whom the CCPA applies to, what rights the CCPA provides, what the CCPA requires for training, and reviews key terms including personal information, what a sale is under the CCPA, what a service provider is under the CCPA, the notable changes the CPRA made to the CCPA, and how the CCPA differs from the GDPR. He also provides several additional resources that can be of assistance in complying with the requirements.
More CCPA Resources
Alan Friel, SB-1121 Does Not Fix the CA Consumer Privacy Act, But Would Delay Enforcement
Alan Friel, California’s New Privacy Law: What You Need to Know Now
Davis Wright Tremaine LLP California Consumer Privacy Act: A Rapid Q&A
Malcolm Chisholm (First San Francisco Partners) California Consumer Privacy Act of 2018 vs. GDPR
Justine Gottshall (InfoLawGroup LLP) The New CA Consumer Privacy Act: Don’t Panic (Yet)
Lothar Determann, California Privacy Law (3rd Edition)
PerkinsCoie, Comparison Chart of GDPR, CCPA, and CPRA
PerkinsCoie, Summary of CPRA New Rights and Obligations
About Professor Solove and TeachPrivacy
Professor Daniel J. Solove is a law professor at George Washington University Law School and the leading expert on privacy and data security law. He has taught privacy law every year since 2000, has published 10 books and more than 50 articles, including the leading textbook on information privacy law and a short guidebook on the subject. His LinkedIn blog has more than 1 million followers. Click here for more information about Professor Solove.
TeachPrivacy provides HIPAA training, privacy awareness training, information security awareness training, phishing training, FERPA training, PCI training, as well as training on many other privacy and security topics. TeachPrivacy was founded by Professor Solove, who is deeply involved in the creation of all training programs because he believes that training works best when made by subject-matter experts and by people with extensive teaching experience.
Please Contact Us If You Are Interested In
Privacy or Security Training
We can provide you with a login so you can evaluate the programs. Click here for our catalog.