is set to take effect January 1, 2020, with enforcement beginning July 1, 2020. This expansive act is designed to give consumers more control over their personal information and will reach beyond California’s borders. Even if your for-profit SMB isn’t located in the Golden State, you may still be on the hook to comply.
Consumers have the right to prevent businesses from selling their personal information to third parties.Businesses are prohibited from charging consumers different prices or refusing service, even if the consumer exercised their privacy rights. With its comprehensive information privacy requirements and extensive reach, businesses need to take a hard look at their personal data-governance capabilities and processes. And for many, CCPA compliance will require them to make sweeping changes.