Cyber/Data/Privacy
California Consumer Privacy Act of 2018 – CCPA
When it takes effect on January 1, 2020, the California Consumer Privacy Act of 2018 (CCPA) will have sweeping ramifications for businesses in California and globally that collect information about Californians. The law broadly governs the collection, use and disclosure of information about California "residents" – consumers, employees, job applicants, students and other categories of individuals – as well as information about households and devices. As a result, the CCPA regulates a broader scope of information than any other privacy law in the world.
The CCPA is enforced primarily by the California attorney general, who may seek civil penalties of up to $2,500 per violation or up to $7,500 per intentional violation. The law, however, also provides a private right of action for certain data breaches arising from violations of California's data security law. Affected California residents can seek $100 to $750 in statutory damages per individual per incident or actual damages, whichever is greater.
Cooley's cyber/data/privacy team – which includes a former California special assistant attorney general who launched the California AG's privacy enforcement and protection division, veteran privacy compliance professionals and some of the nation's leading privacy litigators – is helping clients understand and prepare for the CCPA. If you need assistance with CCPA compliance, please contact a member of Cooley's cyber/data/privacy team.
Resources
- California Consumer Privacy Act of 2018 – full text
- CCPA Checklist
- California Passes Sweeping Consumer Privacy Act
- CCPA FAQs Part 1: The Basics
- CCPA FAQs Part 2a: The CCPA Rights
- CCPA FAQs Part 2b: CCPA Rights and Other Material Provisions
- CCPA FAQs Part 3: Litigation, Regulatory Actions and Liability
- Flowchart – Does CCPA Apply?
Blog posts
- California Legislature Passes One-Year Extension of CCPA’s Human Resources and B2B Exemptions
- CCPA Regulations Take Effect August 14, 2020, California AG Announces Final Revisions
- CCPA Round-Up: Enforcement Begins; “CCPA 2.0” Qualifies for November Ballot; Facebook Updates CCPA Stance
- California Attorney General Submits Final CCPA Regulations for Review
- Round 3: California AG Revises Proposed CCPA Regulations
- Round 2: California AG Revises Proposed CCPA Regulations
- Private and Public CCPA Enforcement Will Launch on January 1, 2020 Despite California AG Delay
- Tardy for the CCPA Party? Tips for Your Last Month Before the Deadline
- The DAA Announces the Development of New CCPA Tools for Ad Industry
- IAB Issues Draft CCPA Framework
- California AG Releases Draft CCPA Regulations and Governor Signs CCPA Amendments Into Law
- Closing Bell: California Legislature Passes Numerous CCPA Amendments and Other Privacy Bills on Final Day of 2019 Session
- Effort to Exempt “HR Data” from CCPA Falters
- CCPA Amendments: Expanded Private Right of Action Blocked; Exclusion of HR Data Advances
- Notes From First CCPA Public Forum in San Francisco
Webinars
- Meeting the CCPA’s Training Requirements
- CPRA and US State Privacy Laws: A Mid-Year Update on the Regulations and Compliance Approaches
- CCPA Training for Privacy and Customer Support Teams
- CCPA Litigation Is Here – Are You Ready?
Please note that CLE credit is only available for the live webcast of these programs. Cooley is not able to provide CLE credit for on-demand recordings at this time.
Thought leadership
- California Consumer Privacy Act 101
- Following California's Lead, Nevada Privacy Law Gives Consumers Right to Opt Out
- California Consumer Privacy Act
- Understanding the CCPA – How Enforcement Will Work: Private and Regulatory Action
- How Enforcement Will Work: Private and Regulatory Action
- Legal & Business Implications of the California Consumer Privacy Act of 2018
- Countdown to 1/1//2020: Preparing for the California Consumer Privacy Act
- California Consumer Privacy Act Update
- Golden State GDPR: What the Edtech Industry Should Know About CA's New Privacy Rules
- California Consumer Privacy Act of 2018: What You Need to Know
This content is provided for general informational purposes only, and your access or use of the content does not create an attorney-client relationship between you or your organization and Cooley LLP, Cooley (UK) LLP, or any other affiliated practice or entity (collectively referred to as "Cooley"). By accessing this content, you agree that the information provided does not constitute legal or other professional advice. This content is not a substitute for obtaining legal advice from a qualified attorney licensed in your jurisdiction, and you should not act or refrain from acting based on this content. This content may be changed without notice. It is not guaranteed to be complete, correct or up to date, and it may not reflect the most current legal developments. Prior results do not guarantee a similar outcome. Do not send any confidential information to Cooley, as we do not have any duty to keep any information you provide to us confidential. When advising companies, our attorney-client relationship is with the company, not with any individual. This content may have been generated with the assistance of artificial intelligence (Al) in accordance with our Al Principles, may be considered Attorney Advertising and is subject to our legal notices.