The California Consumer Privacy Act of 2018 (CCPA) grants California consumers control over the personal information that businesses collect about them. Specifically, the CCPA regulations provide guidance on how to implement the law and the penalties associated with breaking data privacy laws.

It is important to understand CCPA compliance if you are a business owner because if you have not complied with the CCPA, you might be receiving a letter in the mail soon.

On January 27, 2023, California Attorney General Rob Bonta announced an investigative sweep and sent letter to various businesses throughout the state of California with mobile apps that do not comply with the California Consumer Privacy Act. The California Attorney General focused on companies in the retail, travel, and food services industries with apps that allegedly do not comply with consumer opt-out requests or do not offer any mechanism for consumers who want to stop the sale of their personal data.

Currently, the CCP provides the following privacy rights to California consumers:

• The right to know about the personal information a business collects about them and how it is used and shared, including:
• the right to request that businesses disclose the categories of personal information that is collected;
• specific pieces of personal information collected;
• the categories of sources from which the business collected personal information;
• the purposes for which the business uses the personal information;
• the categories of third parties with whom the business shares the personal information;
• the categories of information that the business sells or discloses to third parties
• The right to delete personal information collected from them and to tell their providers to do the same
• The right to opt-out of the sale or sharing of their clients’ personal information, which prohibits businesses from selling or sharing their clients’ personal information unless the business later receives authorization from the consumer.
• The right to non-discrimination for exercising their CCPA rights, which means that businesses cannot deny goods or services, charge a different price, or give a different level or quality of goods or services just because a consumer exercised their rights under the CCPA. (Note, however, that if the use and sale of personal information is necessary for the business to provide the consumer with the goods or services, the business might not be able to complete the transaction from a practical viewpoint.)
• The right to correct inaccurate personal information that a business has from them.
• The right to limit the use and disclosure of sensitive personal information collected about them.

Businesses that are subject to the CCPA have several obligations, including responding to consumer requests and providing notices explaining their privacy practices.

If you need a Los Angeles Data Privacy Law attorney, contact Rodriguez Lopez, APC to see how we can help. Rodriguez Lopez, APC can provide businesses, including startups and established institutions, with policies and guidelines that will conform to the CCPA and other existing California data privacy laws to ensure the best data protection practices.