California Attorney General Issues CCPA Regulations
The CCPA proposed regulations can be found HERE.
On October 10, Xavier Becerra, Attorney General of California, issued the Proposed Regulations for the California Consumer Privacy Act of 2018, commonly known as the CCPA. The AG’s statement can be downloaded online here: https://oag.ca.gov/privacy/ccpa. The Proposed Regulations resolve a number of thorny questions that arose from ambiguities in the drafting of the CCPA, including how a company must verify the identity of a consumer that makes data requests.
The public will have the opportunity to comment on the proposed CCPA regulations. The AG will be holding four public hearings, between December 2, 2019 and December 5, 2019 in Sacramento, Los Angeles, San Francisco, and Fresno.
The CCPA states that it will go into enforcement either six months after the regulations are finalized, or July 1, 2019. As the public meetings surrounding the regulations are not happening until December 2019, it is unlikely the CCPA will become enforceable before July 1, 2020. However, this does not mean that a July 1, 2020 enforcement action could not be brought for data that was improperly collected prior to that date, so businesses should look to implement their compliance programs before January 1, 2020.