CCPA: CALIFORNIA ENFORCES NEW PRIVACY LAWS IMPACTING ALL BUSINESSES COLLECTING DATA By Steve Chhuor, CPA | Manager - Assurance & Advisory
By Keith Hamasaki, CPA | Director - Assurance & Advisory
In recent years, the security of consumer data has been under significant scrutiny by all types of security organizations and governmental bodies around the world. Endless amounts of personal data are gathered by businesses daily. The European Union took the first step toward changing the data security landscape by implementing the General Data Protection Regulation (GDPR). The GDPR framework established new standards on data protection and privacy for all citizens of the European Union countries.1 It didn’t take long for California to follow suit with the California Consumer Privacy Act (CCPA). CALIFORNIA CONSUMER PRIVACY ACT California is home to approximately 40 million residents and has one of the largest economies in the world, with a gross domestic product of approximately $3 trillion. By enacting the CCPA, effective January 1, 2020, California became the first state to establish a statewide consumer privacy law. The CCPA is a comprehensive framework to protect California residents (consumers). Before the CCPA, consumers had minimal control over their personal information. Under the CCPA, consumers now have the right to:2 1. Know what personal information is collected, used, shared, or sold, both as to the categories and specific pieces of personal information; 2. Delete or move personal information held by businesses and by extension, a business’s service provider; 3. Opt-out of the sale of personal information; minors under the age of 16 must provide opt-in consent, and a parent or guardian must consent for minors under the age of 13; 4. Non-discrimination in terms of price or service when a consumer exercises privacy rights under the CCPA; and 5. Hold businesses accountable for failing to take reasonable precautions to protect consumer personal information. 10
KROST QUARTERLY VOL. 3 ISSUE 1 - THE TECHNOLOGY ISSUE