The California Consumer Privacy Act (CCPA) has far reaching impacts on global companies that incorporate data driven technologies into their business models. The CCPA regulates the collection, use, disclosure, and storage of the personal information of California residents and households, including through devices. Violations of the CCPA can result in civil penalties of up to $2,500 per violation, and $7,500 per intentional violation. The CCPA also provides a private right of action for data breaches.

In November 2020, the CCPA was amended when over nine million California voters approved the California Privacy Rights Act (CPRA). The CPRA further restricts certain sharing of personal information, including by amending key definitions in the CCPA and expanding Californians’ privacy rights. These changes could pose significant impediments to targeted advertising.

The CCPA is currently enforced by the California Attorney General. However, rulemaking, enforcement and other powers are gradually shifting to the new California Privacy Protection Agency.

Dechert’s world class Privacy and Cybersecurity team provides client-oriented, strategic advice to global companies on the CCPA and other privacy and cybersecurity laws. We offer the following thought leadership and resources to help you understand the CCPA and its potential impacts on your business.

Please contact a member of our team for assistance with your CCPA questions.

Thought Leadership, Events and Resources

OnPoints

Events

California Attorney General CCPA Website

California Consumer Privacy Act ("CCPA")

Regulations

California Privacy Rights Act ("CPRA")

Regulations

California Privacy Protection Agency ("CPPA")

CCPA-Influenced Laws

Return to Privacy & Cybersecurity