California Consumer Privacy Act (CCPA) Fact Sheet

In brief: The California Consumer Privacy Act (CCPA), effective this year for all companies doing business (including online sales) in the state, is affecting boards in a variety of companies. The new law, which will affect board oversight of consumer privacy, will apply to consumer information sellers of any size, and all companies with sales of more than $25 million. This brief gives board-centric highlights of the new law, provides links to resources (including the full text of the law itself), and draws attention to parallel developments in other states.

This brief can help your board to

  • understand the basic implications of the CCPA,
  • strengthen their compliance programs with respect to privacy, and
  • become aware of the newest privacy legislation in other states. 

Most relevant audiences: audit committee members, compliance committee members, chief compliance officers, chief information security officers, and chief privacy officers