{"id":4635,"date":"2023-03-29T17:03:51","date_gmt":"2023-03-29T21:03:51","guid":{"rendered":"http:\/\/journals.law.harvard.edu\/hblr\/?p=4635"},"modified":"2025-02-16T13:16:38","modified_gmt":"2025-02-16T18:16:38","slug":"an-introduction-to-californias-consumer-privacy-act-2","status":"publish","type":"post","link":"https:\/\/journals.law.harvard.edu\/hblr\/an-introduction-to-californias-consumer-privacy-act-2\/","title":{"rendered":"An Introduction to California\u2019s Consumer Privacy Act"},"content":{"rendered":"

In June of 2018, the California legislature passed the California Consumer Privacy Act of 2018<\/a>, establishing a new system of privacy regulation that has never before been seen in the United States.\u00a0 Specifically, the provisions of the CCPA allow consumers five rights: (1) the right to know what personal information a company has; (2) the right to know whether information is sold or disclosed; (3) the right to opt-out or say no to the sale of personal information; (4) the right to access the information; and (5) the right to equal pricing if these rights are exercised.1<\/a><\/sup>Cal. Civ. Code \u00a0\u00a7 1798.175<\/span>\u00a0The law provides for private action regarding privacy and personal data, providing for damages as detailed in the statute of $100 to $750 per incident.2<\/a><\/sup>Id.<\/span>\u00a0 The law has developed as new regulations have been put in place across the pond in Europe and is in part modeled after some of the legislative and judicial advancements in privacy that came with the establishment of GDPR3<\/a><\/sup>EU General Data Protection Regulation(GDPR): Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation), OJ 2016 L 119\/1.<\/span> and the \u201cright to be forgotten\u201d4<\/a><\/sup>See generally Steven C. Bennett, The \u201cRight to Be Forgotten\u201d: Reconciling EU and US Perspectives, 30 Berkeley J. of Int’l L. 161 (2012)<\/span> in the European Union.<\/p>\n

While the CCPA has already been passed by the California legislature, the provisions of the law will not be enforced until 2020.\u00a0 In preparation for the passage of this act, key definitions will be important to analyze to fully understand the scope of the law and the protections it provides. The current version of the law applies to residents of California and includes a broad definition of personal information with an enumerated list that includes geolocations, biometric information, and data regarding protected classifications.\u00a0 As California continues to grow and advance the tech industry and companies continue to collect and store data, the CCPA\u2019s application to private sector businesses grows in importance.\u00a0 Updates and clarifications the CCPA may be announced by the California Attorney General closer to the date of enforcement implementation. Additional clarifications may provide more detailed information regarding the definition of \u201cpersonal information,\u201d the protected consumers, and the businesses that will ultimately have to comply with the CCPA\u2019s provisions.<\/p>\n

Planning for compliance with the CCPA may prove less cumbersome for larger organizations that have been forced to comply with privacy regulation across other jurisdictions.\u00a0 Following the Google Spain v. Agencia Espanola de Proteccion de Datos and Mario Costeja Gonzalez5<\/a><\/sup>ECLI:EU:C:2014:317<\/span> <\/em>case from the Court of Justice, Google Spain was required to respond to take down requests for storage of personal information on their website and servers.\u00a0 Google convened an Advisory Council<\/a> of professors, practitioners, and lawyers to analyze the implications of removal of information and the correct procedures to receive requests.6<\/a><\/sup>Advisory Council to Google on the Right to be Forgotten, \u201cFinal Report,\u201d Jan 2015.<\/span> While the rights triggered under this decision are not perfectly analogous and covered a very different rights regime where First Amendment implications did not exist, the groundwork to develop a compliance process has already been set in motion.\u00a0 While early stage and emerging firms in the tech sector with access to consumer data may be more nimble to adapt to the CCPA, complying with the law may create new impacts to the sector that will continue to emerge as the law comes into effect and the Attorney General provides greater clarity on the provisions.<\/p>\n

As California\u2019s data privacy protections expand, key legal questions will continue to emerge regarding the applicability of California\u2019s law on technology and data collection that can be \u201cborderless.\u201d\u00a0 A state by state solution may ultimately lead to inconsistencies in the laws governing data collection and privacy and have an outsized effect on companies seeking to target markets across the United States.\u00a0 For example, the Illinois Biometric Information Privacy Act<\/a>,7<\/a><\/sup>740 ILCS 14\/1.<\/span> governing the collection, use, and storage of biometric data requires written consent for the use of biometric data, and the Illinois Supreme Court has recently ruled that no harm, other than a violation of a legal requirement of the statute is needed.8<\/a><\/sup>See Rosenbach v. Six Flags Entm\u2019t Corp., 2019 IL 123186.<\/span>\u00a0 The Business Roundtable, a group of CEOs from leading American companies,9<\/a><\/sup>Business Roundtable, \u201cAbout Us,\u201d https:\/\/www.businessroundtable.org\/about-us, (last visited Feb. 1, 2019).<\/span> has issued a policy perspective<\/a> calling for a national consumer privacy regime.\u00a0 Their recommendations seek to create consistency and uniformity for consumers and businesses as the business of privacy continues to develop and expand.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

In June of 2018, the California legislature passed the California Consumer Privacy Act of 2018, establishing a new system of […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[22],"tags":[],"ppma_author":[386],"class_list":["post-4635","post","type-post","status-publish","format-standard","hentry","category-home"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pgKEUK-1cL","jetpack-related-posts":[{"id":4657,"url":"https:\/\/journals.law.harvard.edu\/hblr\/an-introduction-to-californias-consumer-privacy-act\/","url_meta":{"origin":4635,"position":0},"title":"An Introduction to California\u2019s Consumer Privacy Act","author":"Harvard Law Development","date":"March 12, 2019","format":false,"excerpt":"In June of 2018, the California legislature passed the California Consumer Privacy Act of 2018, establishing a new system of privacy regulation that has never before been seen in the United States.\u00a0 Specifically, the provisions of the CCPA allow consumers five rights: (1) the right to know what personal information\u2026","rel":"","context":"In "Home"","block_context":{"text":"Home","link":"https:\/\/journals.law.harvard.edu\/hblr\/category\/home\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":4460,"url":"https:\/\/journals.law.harvard.edu\/hblr\/bullish-on-blockchain-examining-delawares-approach-to-distributed-ledger-technology-in-corporate-governance-law-and-beyond\/","url_meta":{"origin":4635,"position":1},"title":"Bullish on Blockchain: Examining Delaware\u2019s Approach to Distributed Ledger Technology in Corporate Governance Law and Beyond","author":"ehansen","date":"January 3, 2018","format":false,"excerpt":"Download PDF I. Introduction The buzz around blockchain is getting ever louder. Mergers & Acquisitions (M&A) activity in the blockchain technology sector rose 33.3% between Q2 2016 and Q2 2017, and approximately 80% of respondents to Bain & Company\u2019s 2017 survey of financial institution executives expect their organizations to begin\u2026","rel":"","context":"In "Home"","block_context":{"text":"Home","link":"https:\/\/journals.law.harvard.edu\/hblr\/category\/home\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/journals.law.harvard.edu\/hblr\/\/wp-content\/uploads\/sites\/87\/2018\/01\/Song-Figure-1.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/journals.law.harvard.edu\/hblr\/\/wp-content\/uploads\/sites\/87\/2018\/01\/Song-Figure-1.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/journals.law.harvard.edu\/hblr\/\/wp-content\/uploads\/sites\/87\/2018\/01\/Song-Figure-1.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/journals.law.harvard.edu\/hblr\/\/wp-content\/uploads\/sites\/87\/2018\/01\/Song-Figure-1.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":4364,"url":"https:\/\/journals.law.harvard.edu\/hblr\/trading-in-substitute-securities-liability-under-rule-10b-5\/","url_meta":{"origin":4635,"position":2},"title":"Trading in Substitute Securities: Liability Under Rule 10b-5","author":"ehansen","date":"May 16, 2017","format":false,"excerpt":"Download PDF Cody Donald I. Introduction A trade in a substitute security occurs when a trader with inside information, typically an employee, trades\u2014not in the securities of the company that is the subject and source of the information\u2014but in the securities of another company whose stock would be affected if\u2026","rel":"","context":"In "Home"","block_context":{"text":"Home","link":"https:\/\/journals.law.harvard.edu\/hblr\/category\/home\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":5041,"url":"https:\/\/journals.law.harvard.edu\/hblr\/strong-creditors-weak-owners-a-taxonomy-of-leveraged-finance-and-its-impact-on-corporate-governance\/","url_meta":{"origin":4635,"position":3},"title":"Strong Creditors, Weak Owners: A Taxonomy of Leveraged Finance and Its Impact on Corporate Governance","author":"cmajocha","date":"April 28, 2023","format":false,"excerpt":"I. Introduction This Article builds upon existing literature on controlling shareholders, financial intermediation and creditor governance (Part II) to analyze the mirroring setup between controlling and noncontrolling shareholders on the equity side, and private and public lenders on the debt side (Part III). It studies the dynamic interaction of these\u2026","rel":"","context":"In "Home"","block_context":{"text":"Home","link":"https:\/\/journals.law.harvard.edu\/hblr\/category\/home\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":4349,"url":"https:\/\/journals.law.harvard.edu\/hblr\/age-before-equity-federal-regulatory-agency-disgorgement-actions-and-the-statute-of-limitations\/","url_meta":{"origin":4635,"position":4},"title":"Age Before Equity? Federal Regulatory Agency Disgorgement Actions and the Statute of Limitations","author":"ehansen","date":"April 4, 2017","format":false,"excerpt":"Download PDF Michael Columbo and Allison Davis I. Introduction At what point may a person rest assured that the government will not confiscate her money due to a past alleged regulatory infraction? In Kokesh v. SEC, the Supreme Court is poised to resolve a three-way split among the federal circuit\u2026","rel":"","context":"In "Home"","block_context":{"text":"Home","link":"https:\/\/journals.law.harvard.edu\/hblr\/category\/home\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":4477,"url":"https:\/\/journals.law.harvard.edu\/hblr\/how-do-i-sell-my-crowdfunded-shares-developing-exchanges-and-markets-to-trade-securities-issued-by-start-ups-and-small-companies\/","url_meta":{"origin":4635,"position":5},"title":"How Do I Sell My Crowdfunded Shares? Developing Exchanges and Markets to Trade Securities Issued by Start-ups and Small Companies","author":"ehansen","date":"January 28, 2018","format":false,"excerpt":"Download PDF Governments worldwide are increasingly recognizing that assisting the development of start-ups and small to medium enterprises may be critical to fostering job creation and economic growth. As such, there is a concerted effort to rework securities regulation to encourage the funding of these businesses through innovative approaches such\u2026","rel":"","context":"In "Home"","block_context":{"text":"Home","link":"https:\/\/journals.law.harvard.edu\/hblr\/category\/home\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_sharing_enabled":true,"authors":[{"term_id":386,"user_id":0,"is_guest":1,"slug":"daniel-moubayed","display_name":"Daniel Moubayed","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=blank&r=g","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/posts\/4635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/comments?post=4635"}],"version-history":[{"count":0,"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/posts\/4635\/revisions"}],"wp:attachment":[{"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/media?parent=4635"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/categories?post=4635"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/tags?post=4635"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/hblr\/wp-json\/wp\/v2\/ppma_author?post=4635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}