California enacted the nation’s most extensive consumer privacy law on Thursday after only a week of legislative debate. The California Consumer Privacy Act of 2018 (“CCPA”) was passed quickly to prevent a privacy ballot initiative and creates extensive notice, opt-out/opt-in, access, and erasure rights for consumers vis-à-vis businesses that collect their personal information, as well as a private right of action in the case of a data breach. Though dubbed by many as “California’s GDPR,” the CCPA is fundamentally different and will require businesses to invest billions of dollars into restructuring their operations, while providing little additional or meaningful privacy protections to consumers, if any.
While we will be providing additional analyses in the days and weeks to come, the following is a description of the key provisions of the CCPA.
Read the full analysis here.