The California Consumer Privacy Act (CCPA) has many companies in the U.S. scrambling to figure out whether and how to comply when the law goes into effect on January 1. It explicitly covers for-profit companies doing business in California or with California residents.
The plain language of the statute says one or more of the following conditions must apply to companies for them to be covered by the privacy law:
Has annual gross revenues in excess of $25 million; Possesses the personal information of 50,000 or more consumers, households, or devices; or Earns more than half of its annual revenue from selling consumers’ personal information
This would appear to exempt companies that don’t fall into these relatively clear categories. However, that may not necessarily be the case. I asked several companies and experts for their responses to the question, “Which (types of) companies can confidently ignore CCPA?”
Some probably can but shouldn’t, was the consensus.
Questions for agencies
“One area where the verdict is still out is how CCPA will impact large agencies because of the issue of data ownership,” said Noah Jacobson, SVP of Corporate Development, TapClicks. “Does the responsibility rest on the shoulders of agencies themselves or their clients? For example, a brand might fall under the CCPA threshold and would not have to meet any of the new regulatory requirements, but if an agency has multiple accounts like this, the volume of customer data can quickly surpass the 50,000 threshold. Will that agency then, along with all the clients/brands it represents, have to take action in order to
Read more here: https://marketingland.com/think-ccpa-doesnt-apply-to-you-you-should-probably-think-again-271940