Source: http://www.anthonybarthel.com/blog/what-is-the-ccpa
Timestamp: 2020-07-09 07:56:56
Document Index: 306060406

Matched Legal Cases: ['§ 1798', '§ 1798', '§ 1798', '§ 1798', '§ 1798', '§ 1798', 'Art.9']

What is the CCPA and will it affect me - Nerds for Normals - Small Business and Technology Marketing
What is the CCPA and will it affect my business?
The California Consumer Privacy Act (CCPA) is a bill intend to enhance privacy rights and consumer protection for residents of California. The bill was passed by the California State Legislature and signed into law by then-governor Jerry Brown on June 28, 2018. Officially called AB-375, the law goes into effect on January 1, 2020.
Essentially the intent is to:
Know what personal data is being collected about you
Know whether your personal data is sold or disclosed and to whom
Allow you to say ‘no’ to the sale of your personal data
Access your personal data and know what is being sold or distributed
Request a business to delete any personal information about you
Not be discriminated against for privacy rights
“Do Not Sell My Personal Information” link on the home page of the website of the business, that will direct users to a web page enabling them, or someone they authorize, to opt out of the sale of the resident's personal information (Cal. Civ. Code § 1798.102).
Designate methods for submitting data access requests, including, at a minimum, a toll-free telephone number (Cal. Civ. Code § 1798.130(a)).[13]
Update privacy policies with newly required information, including a description of California residents' rights (Cal. Civ. Code § 1798.135(a)(2)).[14]
Avoid requesting opt-in consent for 12 months after a California resident opts out (Cal. Civ. Code § 1798.135(a)(5)).
Companies, activists, associations, and others can be authorized to exercise opt-out rights on behalf of California residents (Cal. Civ. Code § 1798.135(c).
Companies that become victims of data theft or other data security breaches can be ordered in civil class action lawsuits to pay statutory damages between $100 to $750 per California resident and incident, or actual damages, whichever is greater, and any other relief a court deems proper, subject to an option of the California Attorney General's Office to prosecute the company instead of allowing civil suits to be brought against it (Cal. Civ. Code § 1798.150).
Key differences between CCPA and the European Union's GDPR include the scope and territorial reach of each, definitions related to protected information, levels of specificity, and an opt-out right for sales of personal information.
CCPA differs in definition of personal information from GDPR as in some cases the CCPA only considers data that was provided by a consumer and excludes personal data that was purchased by, or acquired through, third parties[the italicized portion of this sentence is open to debate]. The GDPR does not make that distinction and covers all personal data regardless of source (even in the event of sensitive personal information, this doesn't apply if the information was manifestly made public by the data subject themselves, following the exception under Art.9(2),e). As such the definition in GDPR is much broader than defined in the CCPA.