In case you missed it, the California Consumer Privacy Act (CCPA) went live on January 1, 2020. This act shows that California lawmakers are putting their citizen's privacy and data first, making it harder to user third-party data for targeting purposes. But, what does that mean exactly?

What is the California Consumer Privacy Act?

The California Consumer Privacy Act (CCPA) is a law to promote data protection and privacy for California Residents. The law was approved in June of 2018 and goes into effect January of 2020.

This law holds businesses responsible to provide residents of California the ability to opt-out, delete and access their personal information being captured.

Personal information is identified by the CCPA as “a real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.”

Fines for each unintentional violation can be up to $2,500 and $7,500 for intentional violations. Data breaches may result in exponentially larger penalties.

Does CCPA impact my website?

Businesses are subject to CCPA if they collect personal data, have consumers in California and fulfill at least one of the following:

  • Has annual gross revenues in excess of US$25 million dollars
  • Annually buys, receives for the business' commercial purposes, sells, or shares for commercial purposes, alone or in combination, the personal information of 50,000 or more consumers, households, or devices
  • Derives 50 percent or more of its annual revenues from selling consumers' personal information

There are many ways to collect personal information, some more obvious than others. Some less obvious examples include capturing web leads into a CRM, leveraging paid digital media retargeting audiences or purchasing sales and marketing lists. Website analytics implementations typically collect IP addresses which need to be assessed.

From an advertising perspective, Google has produced a dedicated microsite to web privacy. If you are doing any Advertising with Google, we suggest consulting their guide to ensuring your Google products are compliant.

What’s Next?

While Marcel does not provide any legal consulting around CCPA compliance, we do recommend you contacting a CCPA legal consultant. If you have any questions regarding digital marketing and web development, feel free to give us a shout!