The most significant piece of privacy legislation in the United States to date — the California Consumer Privacy Act of 2018 (CCPA) — is set to go in effect in just a few months, on January 1, 2020. When that time comes, the CCPA will impose a broad set of onerous requirements on companies relating to how they collect, use, disclose and sell consumer personal data.

Although the name of the law suggests that the CCPA applies only to companies located in California, the reach of the CCPA will actually extend nationwide. Specifically, any business that collects the personal data of California residents and meets any one of three thresholds will be required to comply with CCPA mandates.

Originally published in the November/December 2019 edition of the CBA Report.