On January 1, 2020, the California Consumer Privacy Act of 2018 (CCPA) will go into effect.  It will provide consumers with better control over the use of their personal information.  For example, consumers will be able to request what type of information is stored, how it’s used, and whether it be deleted.  In addition, consumers may restrict companies from sharing or selling their data to third-parties.

The CCPA’s stricter consumer privacy compliance requirements will apply to businesses that:

1. collect consumers’ personal information (directly or on its behalf) and determine the purpose or means of processing that information;
2. do business in California; and
3. either: (i) annually generate at least $25 million in revenue; (ii) annually buy, receive, share or sell the personal information of more than 50,000 consumers, households, or devices for commercial purposes; or (iii) derive 50% or more of their annual revenue from selling consumers’ personal information.

Uncertainty remains though regarding the law’s impact. The California Attorney General’s Office has yet to publish regulations, but intends to do so, which will help businesses understand how to comply with the upcoming CCPA requirements.