California’s Attorney General issued draft regulations to implement the California Consumer Privacy Act of 2018 (CCPA)—a law creating new rights for Californians effective on January 1, 2020. Among other things, these regulations would
- make businesses provide an easy-to-understand notice of rights before collecting personal information
- make businesses provide at least two ways (online, phone, printed form) for someone to exercise their rights to access, delete or limit sharing of personal information
- make businesses establish reasonable methods to verify that the same person about whom it has collected personal information is making a CCPA request
- prevent businesses from discriminating against someone exercising their CCPA rights
- prevent businesses from providing different prices or financial incentives to someone if they choose to opt out of data collection or personal information deletion (unless the price difference is reasonably related to the value of the data)
The full text of the draft regulations is available on the California Attorney General’s website (December 6, 2019 is the deadline for comments).
