The California Consumer Privacy Act — the most comprehensive data-privacy law in US history — might be described as a small island of certainty surrounded by a fog of questions. The law will take effect on Jan. 1, creating a series of new protections for California residents and opening the door for class-action litigation to be filed against companies that fail to keep their data safe. California Attorney General Xavier Becerra has begun building the enforcement machine that will apply the CCPA nationally — and perhaps even globally — starting six months later on July 1.
Beyond those predictable mileposts, the questions just keep coming. Most of the answers, however, will have to wait. Jan. 1 will just be the beginning of a three-dimensional game of political, judicial and regulatory chess that wise companies will monitor closely over the next few years.
Topics in the report include:
- The working parts of a landmark new law in the US
- Many companies won’t be ready on Jan 1
- Enforcement: How California’s new privacy cops are preparing
- A US state law that threatens to have international impact
- Washington may supplant CCPA
- Voters could overhaul CCPA in 2020
- Other states pushing for privacy
- Some known knowns ... but a slew of known unknowns