CCPA Crunch Time: Final Amendments Awaiting Governor’s Signature

Now is not the time to gamble with privacy to comply with the California Consumer Privacy Act (CCPA).

Can the law change before January 1, 2020? Sure, but the foundation of it seems pretty set and stone. While there are more efforts by large companies to try and water down or eliminate certain aspects of CCPA, there are governmental representatives trying to enact requirements that could be stricter.

Recent Amendment Updates

On September 13, the California legislature passed six bills that would amend the CCPA. Governor Gavin Newsom has one month to decide whether to sign them into law or not. This week, the governor has been in New York at the United Nations Climate Action Summit, leaving two weeks left to make a decision.

Even if the amendments change, the fundamentals of the CCPA should still be the same. However, the updated amendments could have an impact on businesses handling employee data. They may also affect businesses that collect personal data of representatives at other companies who help provide goods or services to or from other companies.

The CCPA has been a big deal from the get-go, and more changes to the law could be coming soon.

The founder of Californians for Consumer Privacy, Alastair Mactaggart, recently announced a new ballot initiative for November 2020, which would govern the collection of data relating to health and finance, and could impose penalties for sharing and selling data about children.

Moreover, the law also directs California Attorney General Xavier Becerra to issue regulations to implement and clarify the statute.

Attorney General Becerra reportedly expects to release a draft version of these regulations this October and hopes to publish the finalized regulations by the time the CCPA goes into effect at the beginning of next year.

How To Prepare Now

If you’re business is required to comply with the CCPA, we encourage you to do what’s needed now and follow the news to keep up to date with the amendment changes.

You also need be aware of the 12-Month look-back rule – if a consumer makes a request, organizations are required to provide personal records covering the 12-month period preceding the date of the request. Organizations must understand where all personal information about consumers reside and where it flows within the organization, creating mechanisms to enable consumers to make those requests.

Even if there are changes to the law prior to January 1, countries around the world are moving towards privacy by design and consumer rights.

Get started today using CookiePro’s cookie consent banner to begin your privacy journey and rest easy that you are using the most trusted solution in the market.