When California became the first state in the US to enact their version of the European GDPR laws to help protect Joe-consumer from corporations – the results have been swift and obvious. LITIGATION!
What has made this more interesting is the addition of “Prop 24” from the 2020 election. This change includes:
The proposition enshrines more provisions in California state law, allowing consumers to prevent businesses from sharing their personal data, correct inaccurate personal data, and limit businesses’ usage of “sensitive personal information,” which includes precise geolocation, race, ethnicity, religion, genetic data, private communications, sexual orientation, and specified health information. The Act creates the California Privacy Protection Agency as a dedicated agency to implement and enforce state privacy laws, investigate violations, and assess penalties of violators.The Act also removes the set time period in which businesses can correct violations without penalty, prohibits businesses from holding onto personal data for longer than necessary, triples the maximum fines for violations involving children under the age of 16 (up to $7,500), and authorizes civil penalties for the theft of specified login information.
Where the original provision focused on consumers knowing what a company has and to delete that information, this addition adds the sharing, definition of what is ‘sensitive’, places a retention calendar to the data and placed greater emphasis on protecting minors. The law begins to be enforceable on January 1, 2023.
Consider the this law firm website tracking CCPA litigation. They outline 16 current actions in flight ranging from Google and Salesforce to Marriott. Like other more civilian laws that take effect – like handicap laws and safety legislation – there is no lack of law firms looking to monetize the CCPA law +
Prop 24 in the future
With over 80% of all information inside an organization buried inside documents and other unstructured systems, what it takes to not just be able to respond to the original CCPA law in effect BUT NOW also add the needs around Prop 24 is a greater imperative for change. The internal labor and external litigation costs will no nothing but GROW! ANY CORPORATION WHO INTERACTS WITH THE PUBLIC IS LIABLE!
Contact InfoDNA Solutions as we understand the underpinnings of the document types, how to make then searchable and extract all the important metadata with AI and automation to help any sized company be prepared for the current CCPA law and pre-prepare for the addition of Prop 24.
