Readers of this blog have been following our updates on prospective amendments to the California Consumer Privacy Act (“CCPA”). Among other amendments, Assembly Bill No. 1355 (the “Bill”) was passed by the California State Legislature on September 13, 2019. This CCPA amendment, if signed into law by Governor Newsom, will, among other things, rectify some of the drafting errors related to language included in the definition of “personal information,” disclosures required in website privacy policies and how the Attorney General can establish rules and procedures that companies should follow in order to comply with consumer request requirements.
How does the Bill amend the CCPA?
By way of background, the CCPA was hastily written into law to prevent a citizen ballot initiative from going into effect. If the ballot initiative had passed, the State Legislature would not have been able to amend or repeal the proposition without voter input. In its haste to preempt the ballot initiative before the deadline, certain drafting errors were included by the Legislature in their preparation of the CCPA. The following CCPA amendments are meant to help clarify the original intention of the Legislature:
- The Bill amends the definition of “personal information” to correct an error which provided that deidentified or aggregate consumer information was not “publicly available information” within the meaning of the CCPA. Stated differently, the amendment makes clear that deidentified and aggregate consumer information is not “personal information;” and
- The Bill creates Section 1798.185(b)(1), which provides the Attorney General with the discretion “to establish rules and procedures on how to process and comply with verifiable consumer requests for specific pieces of personal information relating to a household in order to address obstacles to implementation and privacy concerns.” The Attorney General is expected to provide guidance on this and many other aspects of the CCPA by and through implementing regulations to be released this Fall.
Preparing for the CCPA
Governor Newsom has until October 13, 2019, to accept or veto the CCPA amendments. Nevertheless, businesses should already be working on compliance strategies in order to best prepare for January 1, 2020, when the CCPA goes into effect.