The groundbreaking California Consumer Privacy Act of 2018 (CCPA), which has implications for most businesses that process the personal information of California residents, signals a substantial shift in the data privacy regime in the US and will require significant changes to businesses’ data protection programs. Given California’s broad economic impact, and the CCPA’s prescriptive requirements, the law may serve as the de facto national standard for businesses that handle personal information about US residents. The CCPA already has triggered the introduction of a flurry of additional state bills with similar requirements, and businesses will need to consider whether to expand the law’s privacy protections to individuals across the United States. The CCPA became effective on January 1, 2020.

Compliance with the CCPA requires businesses to understand:

• What personal information they have about California residents;
• Where that information is stored;
• To whom it is disclosed; and
• How to access and delete it, if required. 
   

How We Can Help

At Hunton Andrews Kurth, our privacy and cybersecurity team is assisting myriad companies in developing and implementing CCPA compliance strategies, including:

• Interpreting and tracking proposed changes in the law;
• Performing fact gathering and due diligence to help businesses set priorities and goals;
• Building compliance programs designed to satisfy applicable obligations under the CCPA and fit each business’s specific needs, risk appetite and budget; and
• Strategizing about how to manage the uncertainty of the passage of potential additional state and federal privacy legislation that would impose similar, but potentially divergent, requirements on businesses.

CCPA Resource Center

Tools

• CCPA Amendment Bill Tracker, September 2019
• CCPA Compliance Checklist, February 2019 
  
  

Webinars

• Hunton Webinar on the California Privacy Rights Act, November 19, 2020
• Hunton Webinar on US Privacy Law: At the Edge of a New Frontier, June 4, 2019
• Hunton Webinar on the California Consumer Privacy Act of 2018, September 2018 

Publications

• The California Consumer Privacy Act is HERE: Are You Litigation Ready?, Cybersecurity Law & Strategy, April 1, 2020
• Hunton Andrews Kurth 2019 M&A Reporter, March 2019
• Where Calif. Privacy Law and Employee Benefits Data Collide, Law360, February 14, 2019 
• California Consumer Privacy Act: A Sea of Change for Retailers, Chain Store Age, February 6, 2019
• 2018 Retail Industry Year in Review, January 2019
• California Consumer Privacy Act and Its Impact, Los Angeles Business Journal, October 29, 2018 

Blog Entries

• California Voters Pass the CPRA, November 4, 2020
• California Attorney General Issues Third Set of Proposed Modifications to the Already Effective CCPA Regulations, October 12, 2020

• California Legislature Votes to Extend CCPA’s HR and B2B Exemptions, August 31, 2020 

• CCPA Regulations Approved by California Office of Administrative Law, August 14, 2020

• Multiple Retailers Sued Under CCPA for Sharing Data Used to Identify Fraudulent Returns, August 13, 2020

• CCPA Enforcement Begins July 1, 2020, July 1, 2020
• BREAKING: The CPRA Is Eligible for the November 2020 Ballot, June 25, 2020
• California Senate Proposes Amendment to CCPA to Address De-Identification and Information Used for Research and Public Health Purposes, June 16, 2020
• California Attorney General Submits CCPA Proposed Regulations to Office of Administrative Law, June 2, 2020
• California Attorney General Emphasizes CCPA Rights During COVID-19, April 24, 2020
• BREAKING: The California Attorney General Has Issued a Second Set of Modified Draft CCPA Regulations, March 11, 2020
• Year of the CCPA, January 10, 2020
• 2020 Vision: The CCPA Is Effective New Year’s Day, January 1, 2020
• California Governor Signs CCPA Amendments into Law, October 13, 2019
• California Attorney General Issues Proposed Regulations for CCPA, October 10, 2019
• Drafter of CCPA Ballot Initiative Filing New Privacy Proposal for the 2020 Ballot, September 25, 2019
• California Attorney General: Draft CCPA Regulations to Be Published in October, September 23, 2019
• Majority of CCPA Amendment Bills Passed by California Legislature, September 16, 2019
• Status Update: Pending CCPA Amendment Bills, September 12, 2019
• Revisions to the Closely Watched “Employee Exemption” Amendment to the CCPA, July 12, 2019
• One Year of CCPA, June 28, 2019

• California Senate Committee Declines to Expand Private Right of Action under the CCPA, May 22, 2019

• Bills Proposing to Amend the CCPA Move Forward in California Assembly, May 7, 2019

• CCPA Amendment Bill Seeks to Expand Private Right of Action and Eliminate 30-Day Cure Period for CA AG Enforcement Actions, February 26, 2019
• Draft CCPA Regulations Expected Fall 2019, February 8, 2019
• CCPA: Employers Should Consider Implications for Employee Benefit Plans, January 16, 2019
• California DOJ to Hold Series of Public Forums on CCPA, January 4, 2019
• Senate Commerce Committee Holds Hearing on Examining Consumer Privacy Protections, September 28, 2018
• CCPA Amendment Bill Signed Into Law, September 25, 2018
• CCPA Amended: Enforcement Delayed, Few Substantive Changes Made, September 1, 2018
• California AG Voices Concern About State’s New Privacy Law, August 30, 2018
• California Consumer Privacy Act Signed, Introduces Key Privacy Requirements for Businesses, June 29, 2018
• California Assembly Bill Aims to Avert State Ballot Initiative Related to Privacy, June 22, 2018
• California Ballot Initiative to Establish Disclosure and Opt-Out Requirements for Consumers’ Personal Information, June 18, 2018
  
  

Alerts

• Ten Years Strong: A Decade of Privacy and Cybersecurity Insights, January 29, 2019