On 1 January 2020, the California Consumer Privacy Act (CCPA) entered into application and broadly expands the rights of California consumers and requires companies within scope to be significantly more transparent about how they collect, use and disclose personal information. Enforcement of the law is slated to begin not later than 1 July 2020.
For multi-jurisdictional companies, this represents one more law to comply with. Organizations that have been focusing on building an accountable privacy program or on comprehensive compliance initiatives for the GDPR will be able to leverage that work for CCPA compliance initiatives.