The US data landscape will change forever when the California Consumer Privacy Act (CCPA) goes into effect on January 1.
Under the terms of the legislation, consumers must be allowed to opt out of having their data “sold” – a proposition that involves an exchange of money or another “valuable consideration”, and is so broad that it will ultimately cover a significant number of enterprises.
As a starting point, firms doing business in California need to comply with this legislation if they:
- generate $25 million+ in gross receipts;
- possess 50,000 or more pieces of...