How CCPA(California Consumer Privacy Act) Impact You

Data Security: Resource

 By Timing Good
How CCPA(California Consumer Privacy Act) Impact You
The California Consumer Privacy Act (CCPA) is to enhances privacy rights and consumer protection for residents of California. It means if you are in California the bill will help you in case your privacy data are in disclosing. Hopefully, other areas of United States will pass similar bills very soon because information security is becoming hot topics from technology industry to everyday life.

As for the California bill, It's signed into law on June 28, 2018, to amend Part 4 of Division 3 of the California Civil Code, and becomes effective on January 1, 2020.

1. Consumer Rights
As resident, you will have below rights to companies that run business in California:

  1. Know what personal data is being collected.
  2. Know whether your personal data is sold or disclosed and to whom.
  3. Say no to the sale of your personal data.
  4. Access your own personal data.
  5. Request to delete your personal information
  6. Not be discriminated against for exercising their privacy rights.
Here, you had better have a clear concept who must meet with the bill. At first, it should be a business that collects consumers' personal data and which does business in California. Then it needs to satisfy at least one of the following thresholds:

  1. Annual gross revenues in excess of $25 million;
  2. Possesses the personal information of 50,000 or more people;
  3. or Earns more than half of its annual revenue from selling personal information.

Check If A Business Qualified Under CCAP If you are customer, there is a quick list to help choose fine business to keep your personal information safe:

  1. Implement processes to obtain parental or guardian consent for kids
  2. "Right to Say No to Sale of Personal Information" link on website's home page
  3. Easily to submit data access requests, including, at a minimum, a toll-free telephone number
  4. Privacy policies include a description of California residents' rights
  5. Avoid requesting opt-in consent for 12 months after an opts out


2 Sanctions By CCPA
If any business leaks your personal information, it's bad, however, don't forget rights by CCPA. Basically, companies that become victims of data theft can be ordered in civil class action lawsuits.

  1. In general, you may claim to pay statutory damages between $100 to $750 per California resident and incident, or actual damages.
  2. A fine up to $7,500 for each intentional violation and $2,500 for each unintentional violation.

Personal Information  What is the PI(Personal Information), CCPA give a definition, which is also referred in many other cases: It's as information that relates to, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Such as

  • real name,
  • alias
  • postal address
  • unique personal identifier
  • online identifier
  • Internet Protocol address
  • email address
  • account name
  • social security number
  • driver's license number
  • passport number
  • state identification card number
In practice, below information are usually accepted as personal information too, though different areas, industries, or organizations may have separate explanations
  • signature,
  • physical characteristics
  • telephone number,
  • state identification card number,
  • insurance policy number,
  • education information
  • employment information
  • employment history
  • financial information
  • medical information
  • health insurance information
Now there is no one standard definition for PI. For example, CCPA isn't stricter than GDPR. But the big picture and trend are similar.