Just when you thought you had a sense of how to deal with the European Union’s General Data Privacy Regulation (GDPR), which went into effect on May 25, along comes the newly enacted California Consumer Privacy Act (CCPA).
Like GDPR, the new California legislation establishes consumer rights over personal data, including the right of deletion of that data, the right to opt out and the right to grant consent before data is collected. It affects companies doing business in California, although the exact definition of that term is expected to be determined more exactly by the time the Act goes into effect in January 2020.
To help organizations get a sense of whether they have to comply with CCPA, and, if so, what that might involve, privacy management firm OneTrust is now out with what it says is the new law’s first Initial Planning Assessment tool (registration required), developed with the International Association of Privacy Professionals.
Коментарі