Public Commentary Sought by California Attorney General’s Office Regarding the California Consumer Privacy Act of 2018

January 11, 2019

The California Consumer Privacy Act of 2018 (“CCPA”) is a comprehensive consumer data privacy act that grants California consumers broad rights and protections over personal data collected by businesses.  The CCPA was signed into law on June 28, 2018, with a delayed effective date of January 1, 2020.  The CCPA includes the following fundamental protections for consumers:

  • Consumers may request, and businesses are required to disclose, the categories and specific items of personal data collected, including sources and business purposes;
  • Businesses collecting consumer data and sharing it with or selling it to third parties, must identify those third parties and the categories of information shared with such third parties;
  • Consumers may opt out of the sale of personal information by businesses and businesses are prohibited from discriminating against consumers for opting out; and
  • Consumers may request that businesses delete their personal data and, upon receipt of a verified request, businesses are generally required to delete such data.

The California Attorney General has initiated its CCPA rulemaking by soliciting broad public participation.  Businesses covered by the CCPA have an opportunity to engage in the rulemaking process as active participants.  

Interested persons may submit comments via e-mail to with the subject line “Comments on CCPA” or by mail to the California Department of Justice, ATTN: Privacy Regulations Coordinator, 300 S. Spring St., Los Angeles, CA 90013.  The Attorney General has also scheduled rulemaking workshops, as set forth below, throughout the State of California, during which the Department of Justice invites all members of the public to speak. Remaining workshops include:[1]

Inland Empire/Riverside: Thursday, January 24, 2019, from 10:00 AM – 1:00 PM (Cesar Chavez Community Center,
2060 University Avenue, Riverside, CA 92507)

Los Angeles: Friday, January 25, 2019, from 10:00 AM – 1:00 PM (Ronald Reagan Building, 300 S. Spring Street,
Los Angeles, CA 90013

Sacramento: Tuesday, February 5, 2019, from 10:00 AM – 1:00 PM (California State Building, 1500 Capitol Avenue,
Sacramento, CA 95814

Fresno: Wednesday, February 13, 2019, from 10:00 AM – 1:00 PM (California State Building, 2550 Mariposa Mall, Room 1036,
Fresno, CA 93721

This Data Security & Privacy Alert is intended to keep readers current on developments in the data security & privacy world and in the law and is not intended to be legal advice. If you have any questions, please contact: Sandy B. Garfinkel, Chair of the firm’s Data Security & Privacy Group, at 412.566.6868 or

[1] Please consult the Attorney General’s website for the most current information with respect to the dates, times and locations of the public forums, as each is subject to change.


Share This Post