Move over GDPR, the California Consumer Privacy Act (CCPA) is coming

The Golden State is taking a major step in the protection of consumer data bypassing the California Consumer Privacy Act (CCPA), which goes into effect on January 1, 2020. The new law gives consumers insight into and control of their personal information collected online. This follows a growing number of privacy concerns around corporate access to and sales of personal information with leading tech companies like Facebook and Google.

The CCPA applies to businesses, including those outside of California, that collect “personal information” (which is very broadly defined) about California residents. The CCPA provides consumers new rights regarding their personal information, including the right to know, the right to access, the right to opt-out of sale and the right to delete. In addition, the CCPA provides for a limited private right of action for data breaches. Companies need to prepare now to avoid potentially costly attorney general enforcement actions.

The CCPA does not go as far as the European Union’s General Data Protection Regulation (GDPR), which went into effect on May 25, 2018. The GDPR unifies data privacy laws across Europe while protecting and empowering EU citizens’ data privacy. It also impacts every company that processes or controls EU citizens’ data, regardless of location, which means that the GDPR is legally binding for U.S. businesses with global operations, international sites or even remote workers.

Although similar, there are some key differences between the CCPA and the GDPR.  To learn more, including, which organizations are covered by the CCPA, what is considered personal information, and what you can do to prepare, register to take ALTA’s free online webinar entitled “Preparing for the California Consumer Protection Act,” scheduled for Thursday, Oct 10, 2019, from 12:00 PM – 1:00 PM CDT. After registering, you will receive a confirmation email containing information about joining the webinar. CE/CLE credit is not available.


  • Stephanie Duchene | Partner | Mayer Brown LLP
  • Kendall Burman | Counsel | Mayer Brown LLP
  • Lei Shen | Partner | Mayer Brown LLP
  • Elizabeth Reilly | Senior Privacy Counsel | Fidelity National Financial