The California Consumer Protection Act (CCPA) goes into effect January 1, 2020, and businesses need to be prepared. The CCPA is considered the strictest privacy law in the United States, requiring companies to develop and maintain data management practices. The Act expands the rights of consumers, such as, requiring transparency from companies on how they collect, use and disclose personal information.
All 50 states have data breach and consumer notification laws, and several states, including California, govern how personal information is stored, shared, and destroyed. Businesses need to have a data protection program in place that includes policies, procedures, and a breach response plan. Failing to comply with theses laws could result in tens of thousands of dollars in fines and penalties, or even criminal and class action lawsuits.