While companies are focusing on compliance with the EU’s General Data Protection Regulation (GDPR) requirements, Californians will likely be given the option on the November 6, 2018 ballot to impose a sweeping, GDPR-like privacy regime that also deserves attention.
If approved by voters in November, the California Consumer Privacy Act would require businesses to disclose the categories of personal information they collect, sell, or share about California consumers, and gives consumers a right to say “no” to the sale of their information. The Act would also allow consumers to sue for violations (which include data breaches resulting from failure to maintain “reasonable security procedures and practices”) without suffering any loss of money or property, and would impose stiff penalties for noncompliance.
Read our client alert.