On June 1, 2020, the California Attorney General released the final set of regulations for the implementation of the California Consumer Privacy Act.
The CCPA requires covered businesses (broadly defined to include most for profit entities with over $25 million in annual gross revenue which collect personal information of California residents) to comply with requirements that give California consumers rights to know what personal information has been collected about them, the sources of the information, the purpose of its collection, and whether it is sold or otherwise disclosed to third parties. It also gives consumers certain additional rights, including the right to access personal information about them held by covered businesses, to require deletion of the information and/or to prevent its sale to third parties.
Upon approval by the Office of Administrative Law, covered businesses will have definitive regulations to follow in their efforts to comply with the CCPA. The California Attorney General may begin enforcing the CCPA on July 1, 2020.
This memorandum highlights key elements of the Regulations material to businesses in finalizing policies and procedures related to their compliance with the CCPA’s requirements.