This article is part of a series of articles on data ethics. Read more.
The California Consumer Privacy Act of 20181 (CCPA) will transform the legal compliance requirements for businesses that buy, sell, and use personal information throughout the global advertising ecosystem. The initial compliance impact of the law will be widespread – the International Association of Privacy Professionals has estimated that more than half a million US. businesses will be regulated by the California law when it takes effect in January 2020.2 Not only US businesses are likely to be affected; some CCPA observers have argued that the law imposes obligations on any business, wherever located, that does business in California and that receives as few as 137 unique website visits a day from the US’s most populous state.3