On June 28, 2018, California enacted the California Consumer Privacy Act (“CCPA”)—the result of a last-minute compromise between California lawmakers and consumer privacy activists intended to avoid a widely criticized data privacy ballot initiative. The law, which is scheduled to go into effect on January 1, 2020, was amended in September 2018 and is likely to be modified again prior to the effective date. In its current form, the CCPA articulates certain data privacy rights of California residents, seeks to protect those rights by imposing new obligations on companies doing business in California, and grants the California Attorney General broad authority to implement related regulations.