The California Consumer Privacy Act (CCPA) is the State of California’s new data privacy law imposing significant obligations on companies with respect to the personal information of California residents. The CCPA takes effect on January 1, 2020, with enforcement delayed until July 1, 2020 or six months after issuance of the Attorney General’s regulations, whichever is sooner. The Attorney General has made several public statements that the Attorney General’s Office will be active in enforcement of these new obligations. Companies subject to the CCPA should promptly examine their personal data collection and processing practices and determine what, if any, changes in practices or documentation that they must make to comply.

O’Melveny’s Data Security and Privacy team helps affected companies comply with the CCPA. Our CCPA Toolkit explains the law’s requirements, can help you make an initial assessment as to whether your company is affected by the CCPA, and lays out eight steps you can take to comply with the CCPA. Our lawyers also can provide specific counseling on the application of the law to your company.