Understanding the scope and impact of the California Consumer Privacy Act of 2018

Elizabeth (Liz) Harding, Jarno J. Vanto, Reece Clark, L. Hannah Ji and Sara C. Ainsworth

Journal of Data Protection & Privacy, 2019, vol. 2, issue 3, 234-253

Abstract: The California Consumer Privacy Act of 2018 (CCPA or the Act) marks a groundbreaking development in US privacy law. While the CCPA ostensibly regulates business practices involving the personal information of Californian consumers, the size, population and economic importance of California means the CCPA will be felt by businesses far beyond California’s borders. Just as Europe’s General Data Protection Regulation (GDPR) required many multinationals to conform their personal information processing to Europe’s high standards in data privacy, the CCPA is poised to have a similar effect in the USA when it goes into effect in 2020. Large companies and businesses that rely on the collection and dissemination of personal information from Californian consumers will need to begin evaluating their exposure now so as to move their operations into compliance. As a result, the CCPA will begin to have a noticeable effect on the personal information collection and disclosure practices of certain dataintensive industries. Moreover, the CCPA is likely to serve as a testing ground and catalyst for other laws pertaining to personal information and data privacy concerns. Thus, it is important to understand the impact of the CCPA in California, in the USA and globally. This paper discusses the scope and impact of the CCPA and critically evaluates the CCPA’s anticipated impact on businesses across select industries. Next, this paper contextualises the CCPA with the GDPR, identifying key similarities and differences between the two regimes. Finally, this paper looks ahead at how the CCPA may affect state and federal law on privacy and personal information protection.

Keywords: California; consumer data privacy; consumer protection; cybersecurity; Federal Trade Commission; General Data Protection Regulation (GDPR); legislature; November ballot; personal information; privacy law; privacy policy; the California Consumer Privacy Act of 2018 (CCPA); Trump Administration; US Department of Commerce’s National Telecommunications and Information Administration (NTIA) (search for similar items in EconPapers)
JEL-codes: K2 (search for similar items in EconPapers)
Date: 2019
References: Add references at CitEc
Citations:

Downloads: (external link)
https://hstalks.com/article/4953/download/ (application/pdf)
https://hstalks.com/article/4953/ (text/html)
Requires a paid subscription for full access.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aza:jdpp00:y:2019:v:2:i:3:p:234-253

Access Statistics for this article

More articles in Journal of Data Protection & Privacy from Henry Stewart Publications
Bibliographic data for series maintained by Henry Stewart Talks ().