Blog: US Privacy Laws
Page 14
CCPA (CPRA) Penalties: What We Know So Far
Attorney-Generals can pursue a civil penalty from anyone that fails to comply with the California Consumer Privacy Act (CCPA) as amended by the CPRA. And consumers now have a private right of action when a data breach compromises certain types of personal data. Businesses showing a proactive and reasonable approach to...
Are You a Business or a Service Provider Under the CCPA (CPRA)?
Two of the main players in the California Consumer Privacy Act (CCPA (CPRA)) are the business and the service provider. The CCPA (CPRA) has very different definitions for these two types of companies, and they each have very different roles and responsibilities. Want to understand if your company is a business or...
The CCPA/CPRA's Private Right of Action
Since the California Consumer Privacy Act (CCPA/CPRA) came into effect, there have been several high-profile lawsuits against businesses that have allegedly failed to properly secure consumers' personal information. California has the most data breaches of any state, so we can expect to see many more CCPA (CPRA) claims. However, the CCPA/CPRA's...
The CCPA/CPRA's "Business to Business" Exemption: AB 1355
The California Consumer Privacy Act (CCPA (CPRA)) has attracted some criticism from businesses due to its extensive definition of personal information. The broad definition of "consumer" covers all California residents, including those acting as representatives of their employers. This has significant implications for businesses that provide products and services to other...
CCPA (CPRA): What Constitutes a "Sale" of Personal Information?
The main purpose of the California Consumer Privacy Act (CCPA/CPRA) is to enable consumers to opt out of the sale of their personal information. However, there was a lot of debate about what constitutes a "sale" of personal information. Given the serious consequences of violating the CCPA (CPRA), this ambiguity is a...
CCPA/CPRA: What Constitutes "Sharing for Business Purposes"
Many businesses are worried about the CCPA/CPRA's broad definition of "selling" personal information. Under the CCPA (CPRA), "selling" personal information includes sharing it for any "valuable consideration" (benefit). A lot of routine business activities could fall under this definition. However, there's an important exception. The definition of "selling" specifically excludes using...