Law: California Consumer Privacy Act of 2018 (last amended in 2019) ('CCPA')

Regulator: The California Attorney General ('AG')

You can follow legislative developments in US States through the USA State Law Tracker.

Summary: The right to pursue and obtain privacy is specifically protected by the California Constitution. In addition, California is the State with the most comprehensive privacy law in the US, the CCPA, which entered into effect on 1 January 2020. The CCPA creates obligations for businesses and provides certain rights for consumers, such as the right of access, the right of deletion, and the right to opt-out of the sale of their personal information. In addition, under §1798.82 of the California Civil Code, businesses that own or license computerised data that includes personal information shall disclose a breach of the security of the system to any affected Californians and, if data of more than 500 residents was breached, to the AG. Other key privacy laws in California include the California Online Privacy Protection Act, the Shine the Light Law, and the California Invasion of Privacy Act.