CALIFORNIA ATTORNEY GENERAL SEEKS PUBLIC COMMENT ON THE STATE’S CONSUMER PRIVACY ACT OF 2018
February 7, 2019
Signed on June 28, 2018, the California Consumer Privacy Act of 2018 (CCPA) is a comprehensive consumer data privacy act that grants California consumers broad rights and protections over personal data collected by businesses. Upon request from a consumer, businesses are required to: disclose the categories and specific items of personal data collected, including sources and business purposes; disclose what data is shared with third-parties, and who those parties are; allow consumers to opt-out of third-party data sharing; and to delete a consumer’s data permanently. The law may be enforced by the California Attorney General starting on July 1, 2020 or six months after the California Attorney General adopts regulations implementing the law, whichever is sooner. Citizens also have a private right of action to sue under the CCPA, beginning on the effective date of the legislation, January 1, 2020. However, private suits may only pertain to a data breach and may not be brought for a failure to give certain notices or disclosures.
Businesses have an opportunity to engage in the CCPA rulemaking process as active participants. Interested persons may submit comments via e‐mail to privacyregulations@doj.ca.gov with the subject line “Comments on CCPA” or by mail to the California Department of Justice, ATTN: Privacy Regulations Coordinator, 300 S. Spring St., Los Angeles, CA 90013. The Department is also holding public hearings on the Act, the schedule for which is available at oag.ca.gov/privacy/ccpa.
Please contact us if you would like assistance with comment submission.
If you have any questions, please contact Evelyn Sahr (esahr@eckertseamans.com or 202-659-6622); Drew Derco (dderco@eckertseamans.com or 202-659-6665), or Alexander Matthews (amatthews@eckertseamans.com or 202-659-6633).