California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act of 2018 (CCPA) takes effect on January 1, 2020, and the state will begin enforcement as of July 1, 2020. By granting California consumers expanded control over their personal information, the law imposes strict and novel obligations on all qualified businesses that gather, use or sell such data. Among other requirements, the bill mandates that businesses grant consumers the right to opt out of the sale of their personal information to third parties. The CCPA's impact extends beyond California and has particular significance for all online businesses or businesses that have any online presence whatsoever, especially when viewed alongside similar data privacy laws passed by states such as Washington and Illinois. As data breaches continue elevating privacy concerns among the public, businesses should expect to face continually increasing scrutiny under the CCPA and future federal, state and local regulations.

Baker Botts lawyers in cross-disciplinary specialties work closely to monitor the mottled United States data privacy landscape – especially how the state and local legislation and any federal response is evolving in its application across geographies and fields.