Skip to Main Content

The California Consumer Privacy Act of 2018 (CCPA)

Print Version

The CCPA is an expansive privacy law that will provide consumers with certain privacy rights and more control over personal information that businesses collect about them.

Featured Video

What to Do in 2022 – Privacy and Data Protection for the New Year January 28, 2022

Why Baker Donelson?

More than 30 attorneys on our Privacy and Information Security Team
Listed as a BTI Cybersecurity & Data Privacy 2020 "Leading Law Firm"

Practice Overview

The law stands to have far-reaching consequences for many businesses across the country. Although the CCPA is similar to the GDPR, each has unique requirements. As a result, even businesses that have already addressed their GDPR compliance obligations will need to review their data activities before they undertake new data privacy efforts.

Important Dates

  • January 1, 2020: CCPA will go into effect (with a 12-month lookback period)
  • Spring 2020: Final regulations from Attorney General will be issued
  • July 1, 2020: Attorney General will begin enforcement

Baker Donelson's Data Protection, Privacy and Cybersecurity attorneys have extensive experience helping our clients comply with privacy laws in the U.S. and around the globe. Our team members work with businesses to help them understand the impact that CCPA and other state law will have on their business (even if they are outside of California).

As with all privacy laws, businesses need to understand and identify the data that is impacted and determine what updates to their privacy policies will need to be made to be in compliance. Our team of privacy attorneys work with clients across industries to assist in:

  • Strategic planning with respect to data inventory and mapping
  • Compliance readiness assessments, including privacy and data security gap assessments
  • Preparation of privacy notices
  • Compliance program development, implementation and training
  • Risk management, including vendor diligence and contracting
  • Identifying, engaging and managing IT consultants and solutions

Industry sectors that we provide guidance include:

  • Advertising, marketing and digital media
  • Financial services/wealth management
  • Health care
  • Hospitality
  • Human resource services including employee benefit providers
  • Manufacturing, including automotive
  • Professional services organizations
  • Real estate
  • Retail
  • Software and Software-As-a-Service providers
  • Assisted national ecommerce and brick-and-mortar retailers in developing strategic plans with respect to data inventory and mapping activities.

  • Worked with international data and analytics company and national laboratory company to determine CCPA applicability based upon their operations.

  • Prepared revised privacy notices for retailers, distributors, and software companies.

  • Counseled national commercial financing company with respect to CCPA preparedness planning.

  • Worked with health care vendors to determine interplay of individual rights afforded under CCPA and those provided under HIPAA.

  • Worked with national automobile dealer to develop strategic plan for CCPA and assist with vendor contracts.

  • Counseled national investment management company on CCPA applicability to multiple business operations.

Email Disclaimer

NOTICE: The mailing of this email is not intended to create, and receipt of it does not constitute an attorney-client relationship. Anything that you send to anyone at our Firm will not be confidential or privileged unless we have agreed to represent you. If you send this email, you confirm that you have read and understand this notice.
Cancel Accept