California Consumer Privacy Act of 2018 – CCPA

When it takes effect on January 1, 2020, the California Consumer Privacy Act of 2018 (CCPA) will have sweeping ramifications for businesses in California and globally that collect information about Californians. The law broadly governs the collection, use and disclosure of information about California "residents" – consumers, employees, job applicants, students and other categories of individuals – as well as information about households and devices. As a result, the CCPA regulates a broader scope of information than any other privacy law in the world.

The CCPA is enforced primarily by the California attorney general, who may seek civil penalties of up to $2,500 per violation or up to $7,500 per intentional violation. The law, however, also provides a private right of action for certain data breaches arising from violations of California's data security law. Affected California residents can seek $100 to $750 in statutory damages per individual per incident or actual damages, whichever is greater.

Cooley's cyber/data/privacy team – which includes a former California special assistant attorney general who launched the California AG's privacy enforcement and protection division, veteran privacy compliance professionals and some of the nation's leading privacy litigators – is helping clients understand and prepare for the CCPA. If you need assistance with CCPA compliance, please contact a member of Cooley's cyber/data/privacy team.


Blog posts


Please note that CLE credit is only available for the live webcast of these programs. Cooley is not able to provide CLE credit for on-demand recordings at this time.

Thought leadership

Related Contacts
Michael Rhodes  Partner San Francisco, Los Angeles – Downtown
Matthew D. Brown  Partner San Francisco
Travis LeBlanc  Partner Washington, DC, San Francisco
Bethany Lobo  Partner San Francisco
David Navetta  Partner Colorado
Related Practices & Industries