After 2 years of discussion, the California Consumer Privacy Act (CCPAA) has officially taken effect January 1st 2020. CCPA gives California residents the right to learn what data companies collect about them, request for data to be deleted, and for that data not to be sold. Now you’re probably thinking, how does this affect me? Well, take a look below for all the important information you need to know about CCPA as an individual and as a business owner.
What Personal Data is included in CCPA?
CCPA covers your name, username, password, phone number, physical address, and information used to characterize you such as race, marital status, religion, sexual orientation, military status and more. Biometric information such as fingerprints, facial recognition data, browsing history and location information are also included under CCPA. Lastly, CCPA includes information used by companies to track your online behavior such as IP addresses and device identifiers.
Does this affect me if I live outside of California?
While only California residents will have the right to opt out of the sale of their data or ask companies to delete it, under CCPA you will be able to learn more about what companies are collecting from you. CCPA requires all for-profit businesses to describe in their privacy policies the categories of data they collect about their users. At this time, companies are likely to extend the rights to everyone to lower the risk of trying to figure out if CCPA applies to different users to stay safe. With California passing this law, other states are likely to follow too, so it’s better to be educated now rather than later.
How is this different from GDPR?
GDPR applies to companies with users in the European Union as it regulates how companies collect the same information CCPA does. However, GDPR puts stricter regulations on how companies go about collecting user data. What’s included in this is being required to obtain consent when collecting the data, or to have a valid reason for collecting. CCPA does not enforce companies to go through this step to collect personal information, so any limitation on data collection will come from the individual who makes the request to delete and/or opt out of the data collection themselves.
With the passing and implementation of CCPA, this marks a staple in data transparency and security. We hope you as an individual and those who are business owners take this seriously and take the necessary steps in ensuring your data is protected and your business is compliant with CCPA. If you have any questions, feel free to reach out to us at 516-377-6585.