California Consumer Privacy Act: The State of Readiness

Survey Findings From December 2019

The California Consumer Protection Act (CCPA) went into effect on Jan. 1, 2020. The intentions of the law are to provide California residents with the right to know what personal data is being collected about them, know whether their personal data is sold or disclosed and to whom, say no to the sale of personal data, access their personal data, request that a business delete their personal data, and not be discriminated against for exercising their privacy rights.

An organization is legally required to comply with the CCPA if the firm does business in California and satisfies at least one of the following criteria:

• Generates $25 million USD or more in annual revenue;
• Buys or sells the personal information of 50,000 or more consumers, households, or devices; or
• Earns more than half of its annual revenue selling consumers’ personal data