CCPA Is Officially Being Enforced, but There Are Still Unanswered Questions

KEY INSIGHTS:

• Despite being enforceable from July 1, 2020, there are differing interpretations over CCPA.
• Those mishandling children’s data are likely to come into regulators’ crosshairs first.

Enforcement of the California Consumer Privacy Act (CCPA) officially begins July 1, but unclear guidelines and upcoming ballot initiatives can make complying with the law difficult.
The law, which went into effect Jan. 1, gives internet users in California the right to request businesses to not sell, and even delete, their personal information. But there are still questions around what counts as selling information and which party manages opt outs.
CCPA defines a sale as “selling, renting, releasing, disclosing, disseminating, making available, transferring or otherwise communicating orally, in writing or by electronic or other means, a consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration,” according to the California Legislature’s website.