California’s Consumer Privacy Act (CCPA) differs from GDPR in one dramatic way! Customers may file legal grievances and expect judgements, even if their data has not been hacked. If your company is unable to process any of the listed requests below, for a California resident (within 45 days), you will be vulnerable in court.  Additionally, California residents will not be required to prove damages in order to be successful. CCPA becomes law January 1, 2020.

A. Requests.

1. Disclose the categories and specific pieces of personal information your company collects about the consumer.
2. The sources from which that information is collected.
3. The business purposes for collecting or selling the information.
4. Categories of Third Parties with which the information is shared
5. Deletion of a consumer’s personal information.
6. Disclosure of categories of information sold or disclosed to Third Parties and the identity of those Third Parties.
7. Allow a consumer to opt out of the sale of personal information at no cost to the consumer.

Large Class Action Law Firms may already be planning for these suits that could cost companies well over the GDPR’s 4% Fine.

https://www.womblebonddickinson.com/us/insights/news/ccpas-new-privacy-rights-new-consumer-demands 

#CCPA #GDPR #Big Data #Data Compliance #PII #Amazon #Microsoft #Facebook #Google