Alastair Mactaggart, the man behind the California Consumer Privacy Act, has a second act.
Disturbed by the intensity with which ad industry and tech lobbying groups “explicitly prioritized weakening the CCPA,” as Mactaggart put it in an open letter posted to his website, he’s spearheading a new ballot measure for the 2020 California elections.
The California Privacy Rights and Enforcement Act, as the proposal is being called, was submitted on Wednesday on behalf of Mactaggart’s nonprofit, Californians for Consumer Privacy.
CPREA (probably good to get used to seeing that acronym) needs more than 620,000 signatures from California voters to quality for a spot on the ballot.
It’s best to take this initiative seriously. Mactaggart, a California resident and wealthy real estate developer turned avid privacy advocate, reportedly spent more than $3 million of his own money to get enough signatures to snag a spot on the 2018 ballot for what became the CCPA.
He withdrew the measure at the last minute after negotiating a deal with lawmakers that led to the passage of the current CCPA, which has businesses scrambling to comply by the fast-approaching effective date on Jan. 1, 2020.
Mactaggart’s new proposal is meant to buttress the CCPA with additional rights that would make it difficult for deep pocketed technology companies to water down. A law passed through a ballot initiative is much more difficult to modify than one that’s passed through a traditional legislative process.
During the most recent California legislative session, which ended in mid September, members of the legislature proposed more than a dozen bills to amend the CCPA. Less than half were eventually approved by both houses of the California state legislature. They still await the governor’s signature, but the process emphasized that businesses will continue to push for modifications to the law.
What’s in the new initiative?
Click here to read a full text annotated version of the 51-page proposal.
According to Mactaggart’s statement, the new law would:
For now, nothing.
The next big item on the agenda is the release of the draft CCPA implementing regulations expected soon from the California attorney general.
The AG’s office “has made it clear that they continue to focus on that process” and the subsequent comment period that will follow before the regs are finalized, said Gary Kibel, a partner at Davis & Gilbert LLP.
“The new ballot initiative does not alter those plans,” Kibel said, although it’s “something to consider and address if it does make it to the ballot in 2020 and, of course, if it’s approved.”
Beyond attempting to further shore up CCPA, the ballot measure aims to set a proposed path towards potential federal privacy legislation, said Shane Wiley, chief privacy officer at location analytics company Cuebiq, and former VP of privacy at Oath.
“As many legislators have commented publicly, any federal privacy law could not be weaker than CCPA,” said Wiley, who was in the audience at an International Association of Privacy Professionals in Las Vegas on Wednesday when MacTaggart spoke about the initiative publicly for the first time.