Any U.S. business that mishandles the personal information of customers who live in California could be held liable if the California customer’s personal information is compromised in a data breach. This is true regardless of whether the business is located in California or elsewhere. Unfortunately, many business owners are unaware of the CCPA. A survey conducted by ESET found that 44% of business owners had never heard of the law and just 12% said they knew whether or not the law applied to them. About one-third (34%) said didn’t know whether or not they should change how they capture, store and process customer data as a result of the law.