Home Privacy Get Up To Speed: CCPA Enforcement Starts On July 1

Get Up To Speed: CCPA Enforcement Starts On July 1

SHARE:
California Consumer Privacy Act
California Consumer Privacy Act

Folks, enforcement of the California Consumer Protection Act (CCPA) is here.

Starting July 1, despite protestations from the business and advertising communities, the California attorney general can start investigating complaints, bringing actions, poking into privacy policies and issuing fines. Lobbying to postpone enforcement until Jan. 1, 2021, in light of the ongoing pandemic, was brushed aside by the AG.

Although consumers can only bring a private right of action in the case of a data breach – several have already been filed, including against Zoom and video chat app Houseparty – the AG is able to bring statutory actions in response to any violation of the CCPA.

In full en(force)

And the AG’s office appears more than ready to do so.

In a statement in early June after his office finally submitted the final draft of the CCPA implementation regulations for approval, California Attorney General Xavier Becerra said: “Businesses have had since Jan. 1 to comply with the law, and we are committed to enforcing it starting July 1.”

While it’s unclear what enforcement will look like, the ongoing COVID-19 situation won’t excuse noncompliance.

In April, Becerra issued an advisory reminding consumers of their data privacy rights amid the pandemic and calling out their new rights under the CCPA, including the ability to opt out of the sale of their personal information and to request that a business disclose what personal info it collects, uses, shares or sells about them. He reiterated these points in a detailed tweet thread on Tuesday.

Complicating matters is that the right of disclosure includes a look-back provision covering the 12-month period that precedes the date of a verifiable access request. Businesses could technically be held accountable under CCPA for data collection that took place going back to Jan. 1, 2019, one year before the law’s effective date.

Businesses and ad tech companies hope the AG takes into consideration that preparation has been complicated by the fact that the law was a moving target until only recently. Although the AG’s implementation regs have been submitted, the California Office of Administrative Law has yet to officially approve them.

“Having open questions about CCPA this close to its enforcement date hinders implementation,” said Alice Lincoln, former VP of data policy and governance at MediaMath, currently a privacy product management lead at Facebook. “We hope that the AG will appreciate that just as the regulations have been challenging to finalize, companies working hard to interpret the law may still struggle to be in perfect compliance on July 1.”

Reading list

A lot has happened since 2018, when the CCPA was still just a California ballot initiative. Here’s a rewind in case you missed anything.

And P.S. California Attorney General Greenlights CPRA for Appearance on November Ballot

 

Must Read

Closeup image bag of money and judge gavel. Lawsuit, auction, bribe and penalty concept.

The LG Ads Legal Saga Continues With A Fresh Suit, This Time Against Kroll

Alphonso co-founder Lampros Kalampoukas is suing Kroll for allegedly undervaluing the company by nearly $100 million to aid LG Electronics in a shareholder dispute.

Comic: Metric Meditations

The Startup Trying To Automate The Ad Platform Reconciliation And Refund Mess

The ad tech startup Vaudit, founded last year by Mike Hahn, aims to automate the process of campaign reconciliation atop major ad platforms.

Privacy! Commerce! Connected TV! Read all about it. Subscribe to AdExchanger Newsletters

The Trade Desk Lays Out Its Case To Beat Walled Gardens. Does Wall Street Buy It?

The Trade Desk continued its shaky 2025 earnings schedule when it reported Q2 results on Thursday.

Magnite Targets CTV, SMBs And Google's SSP Market Share

The SSP is betting on the DOJ’s antitrust remedies, plus closer relationships with agencies, DSPs and mid-sized advertisers, to help it eat some of Google’s lunch.

Zillow Pilots Containerized RTB, As It Rethinks The Equation Of Quality And Cost

Zillow is the pilot brand advertiser to test a new programmatic buying strategy known as containerized RTB. The strategy embeds the DSP or ad-buying platform intelligence, in this case the startup Chalice Custom Algorithms, within the SSP, which is Index Exchange.