CCPA - Organization must report a data breach within 72 hours!
California's new AB 375 privacy law is not as bad as GDPR, but the details are still in flux. CCPA does not have some of GDPR's most scary requirements like the very short 72-hour window in which an organization must report a data breach but in other areas, it goes even further than GDPR. So, how do you get and stay compliant? CSO Online has a good executive summary.
What is the CCPA?
- AB 375 allows any California consumer to demand to see all the information a company has saved on them
- Also, a full list of all the third parties that data is shared with.
- California law allows consumers to sue companies if the privacy guidelines are violated, even if there is no breach
Which companies does the CCPA affect?
All companies that serve California residents;
- Have at least $25 million in annual revenue must comply with the law.
- In addition, companies of any size that have personal data on at least 50,000 people
- Collection on more than half of their revenues from the sale of personal data
Companies don't have to be based in California or have a physical presence there to fall under the law. They don't even have to be based in the United States.
An amendment made in April exempts “insurance institutions, agents, and support organizations” as they are already subject to similar regulations under California’s Insurance Information and Privacy Protection Act (IIPPA).
When does my company need to comply with the CCPA?
The law went into effect on January 1, 2020, but enforcement began on July 1.
What happens if my company is not in compliance with the CCPA?
- Companies have 30 days to comply with the law once regulators notify them of a violation
- If the issue isn't resolved, there's a fine of up to $7,500 per record.
"If you think about how many records are affected in a breach, it really increases very quickly," Debra Farber, senior director for privacy strategy at BigID.
How To Get And Stay Compliant?
Let us set up a time to talk, and make this process a lot less scary and daunting!
206.709.9002 ext. 444017