The California Consumer Privacy Act (CCPA) is a complicated, confusing and comprehensive state privacy law that impacts most marketing research and data analytics companies and departments, and covers almost all consumer data, online or otherwise. In 2023, it will be modified and superceded by the California Privacy Rights Act (CPRA).
CCPA requires extensive disclosure about data collection, use and sharing, and consumer rights to data access, deletion and opt out (from data sharing/sale). It also further expands penalties for data security breaches, punishable by private lawsuits. The Attorney General has wide latitude to enforce the law.
Links to the law and regulations:
Disclaimer: The information provided by the Insights Association is for informational purposes only and not for the purpose of providing legal advice. Please contact your attorney to obtain advice on specific issues or questions.