California Consumer Privacy Act (CCPA), which came into effect on Jan. 1, 2020 is a law that protects the privacy rights of consumers within the state. Like Europe’s General Data Protection Regulation (GDPR), the CCPA is anticipated to affect many businesses. However, most companies don’t know how this will affect them. Approximately 44.2% of business owners have never heard of CCPA, while only 11.8% know if the law applies to them, and 34% are unsure if they need to change how they capture, store and process data.
Before we delve further into the impact of CCPA on businesses, let’s understand the act in detail.
CCPA is a bill that will require businesses to implement new policies to protect personal information (privacy policies and facilitation of consumer rights). It will only apply to a business that earns $25 million in revenue per year, sells 50,000 consumer records per year, or derives 50% of it’s annual revenue from selling personal information (including businesses that collect or sell personal information from consumers in California, irrespective of where the company is located).
CCPA protects the following consumer rights:-
Consumer Rights to Access Data
Due to the implementation of CCPA, companies will be required to grant consumers access to their data stored by the company. Previously, consumers were unaware of what businesses were using their data for or even what information businesses had collected about them.
CCPA is critical as businesses must provide a 12-month look-back for their consumers. Thus, the companies must start their CCPA compliance journey early on.
Consumer Rights to choose to opt out of the sale of personal data
Due to the enactment of CCPA, companies would be required to provide consumers with the choice to opt out of the sale of their data. Thus, businesses must stop selling customer data if their consumers disagree. This will make it difficult for companies to collect information about their potential customers.
Consumer Rights to sue companies that misplace their information
Another effect of the CCPA is that consumers will have the right to sue companies that lose their personal information to hackers. Besides, if the consumer data is stolen, the sued company will lose money and, also consumers will intend to take their business elsewhere. Consequently, companies will want to step up and work harder to guard consumer data.
Companies must realize the consequential impact of the CCPA in advance and begin preparation to become CCPA compliant. Failure to do so will lead to fines, lawsuits, damaged reputation, and loss of customers.