Close
Close

What to expect from CCPA enforcement

There’s more to learn as CCPA enforcement begins

RFP
Man using a credit card and a laptop to shop online at home The California Consumer Privacy Act (CCPA) took effect January 1, 2020 – but regulatory enforcement began July 1.

CCPA requirements can apply to any company that collects data from California residents, for online commerce or other purposes. As CCPA enforcement begins, many companies wonder what to expect and how they might need to adapt.

“I think starting to build some foundational programs, even though they may not be explicitly required under the CCPA, will go a long way to helping you build a program that can then be extended with further regulation,” said Privacy and Data Protection Principal Lindsay Hohler.

Lindsay Hohler“I think starting to build some foundational programs, even though they may not be explicitly required under the CCPA, will go a long way to helping you build a program that can then be extended with further regulation.”

– Grant Thornton
Privacy and Data Protection Principal
Lindsay Hohler
Further regulations could soon include the California Privacy Rights Act (CPRA) that will appear on the November ballot in California. The CPRA would take the CCPA protections further, imposing more rules for data retention, increasing accountability for data security and data breach prevention and establishing a California Privacy Protection Agency to enforce compliance. If passed, the law would take effect in 2023 – but some of its provisions could go into effect as soon as January 1, 2021. With states passing new privacy laws and regulations each year, companies can prepare themselves by following a practical plan, calling upon managed services as needed.

For more about what companies should do now and expect in the future, listen in on the discussion between Hohler and Privacy and Data Protection Senior Manager Ariana Davis:


Contacts:
Lindsay Hohler
Principal, Privacy and Data Protection
T +1 703 847 7529

Ariana Davis
Senior Manager, Privacy and Data Protection
T +1 212 624 5336