There’s a lot of noise about California’s Consumer Privacy Act (CCPA).

← Back to Blog

There’s a lot of noise about California’s Consumer Privacy Act (CCPA). It is the latest GDPR type of legislation to hit a US statute. It is the starting point for all US states to adopt a similar legislation ahead of Us Federal laws to do the same.

With the CCPA, it won’t just be about whether you hold consumer data of California’s citizens. The act covers the household which changes the scope slightly over that of GDPR. The fine regime is on par, if not higher than GDPR with fines of between $2,500 and $7,500 per violation (per record). With 2019 being the biggest year for data breach’s on record we can expect their to be fines when the act comes into force. The act also gives consumers the right to directly file lawsuits against an organisation if it has failed to reasonably safeguard data.

For those that have had to comply with GDPR then there will be an exercise of having to identify personal data belonging to Californians households. But it may be wise to cover data belonging to all US citizens as the direction of travel for data regulation in the US has been set.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6590497078378590208

Categories

Cybersecurity, Legal, Regulation & Compliance

Tags