He entered force In California, on January 1, 2020, the California Consumer Privacy Act (CCPA) came into effect. And now, on July 1st, the law's sanctions will take effect, potentially applying to those who are not in compliance. With this being the final stretch to achieve compliance, it's necessary to understand if or how your company might be affected, in order to know what to do about it.
We've compiled 5 things you need to know about the CCPA so you can learn more.
1. Is your company affected?
The CCPA affects all for-profit businesses that do business in California and collect personal information from California resident consumers. To qualify, your business must meet at least one of three business categories: businesses that generate more than $25 million in annual revenue; businesses that access (purchase, receive, sell, or share) the personal information of at least 50.000 California consumers, households, or devices; or businesses that are earning at least half (50%) of their total annual revenue from the sale of personal information of California residents.
2. Transparency.
With the CCPA, people have the right to ask companies exactly what personal information they hold about them and how they collected it. This also allows consumers to request that these companies delete their data. You need to be prepared for this. respond to these requests.
3. Very transparent.
In addition to knowing what information the company holds, consumers have the right to ask companies to disclose to whom they have sold their personal information. It is also possible to inquire about the "commercial purpose of collecting or selling personal information."
4. Data control.
Consumers in California, under the CCPA, will be able to opt out of having their personal information sold by companies. The law requires companies to clearly provide this option. Regarding minors, the law states that “a company must not sell the personal information” of anyone 16 years of age or younger if the company has “actual knowledge” of the person’s age. If the person is under 13, parental or guardian consent is required.
5. It's not just California.
The CCPA doesn't just impact companies based within the state. California is the most populous state in the United States, so you may be interacting with more personal information from its residents than you realize, regardless of where your company is located on the world map. Some companies, like Microsoft, have already decided to apply the CCPA reforms to residents of all US states. The CCPA is also already having an impact in other US states, which have adopted their own versions of the law.
First steps.
Amid the coronavirus pandemic, while compliance may seem impossible, there are some steps you can take to help in this process. For example, having a complete overview of the information your company collects. data mapping It should be reassessed so that your company has an up-to-date understanding of the data it is collecting, thus ensuring compliance with the CCPA.
Update your privacy policyInclude important information regarding the CCPA, such as a description of the privacy rights of California residents, as well as the categories of data your company collects and shares. All your company employees need to have visibility of your policy; it should play a key role in all your business activities.
Finally, remember to always stay informed about updates related to the CCPA. The regulation contains important details, such as those regarding its implementation, which will still be interpreted and applied by the California Attorney General.
