California Consumer Privacy Act (CCPA)
California Consumer Privacy Act (CCPA)
The California Consumer Privacy Act (CCPA) is scheduled to take effect on January 1, 2020. This regulation brings significant change to the U.S. privacy and data protection law landscape, and serves as a harbinger of a potential wave of additional consumer data privacy regulations at the state and even federal level, much as the General Data Protection Regulation (GDPR) has changed how business is done in the EU and beyond.
Our approach to CCPA compliance begins with a clear and nuanced understanding of the statute, including both existing provisions, as well as the “unknowns” and associated risk factors based on anticipated changes or clarifications to the law.  To support your CCPA readiness efforts, we will prepare and assist as needed in implementing a plan that features plain-language, practical steps toward compliance, leverages your existing privacy compliance and customer notice programs and mechanisms to the fullest extent possible and well-reasoned and risk-based analysis to address the more ambiguous CCPA provisions.

Our team is deeply familiar with the implications of the CCPA and other legislative proposals, and we provide clients with customized, practical advice regarding:
 
  • Compliance readiness assessment 

  • Compliance program development and implementation (including internal and external-facing policies and notice development)

  • Inventory data and mapping data flows

  • Privacy and data security assessments

  • Risk management

  • Tracking legislative and regulatory developments (CCPA and beyond)

  • Vendor contract drafting and review

  • Identifying, engaging and managing/supporting IT team members, consultants, and solutions
 
 

Overview

The California Consumer Privacy Act (CCPA) is scheduled to take effect on January 1, 2020. This regulation brings significant change to the U.S. privacy and data protection law landscape, and serves as a harbinger of a potential wave of additional consumer data privacy regulations at the state and even federal level, much as the General Data Protection Regulation (GDPR) has changed how business is done in the EU and beyond.
Our approach to CCPA compliance begins with a clear and nuanced understanding of the statute, including both existing provisions, as well as the “unknowns” and associated risk factors based on anticipated changes or clarifications to the law.  To support your CCPA readiness efforts, we will prepare and assist as needed in implementing a plan that features plain-language, practical steps toward compliance, leverages your existing privacy compliance and customer notice programs and mechanisms to the fullest extent possible and well-reasoned and risk-based analysis to address the more ambiguous CCPA provisions.

Our team is deeply familiar with the implications of the CCPA and other legislative proposals, and we provide clients with customized, practical advice regarding:
 
  • Compliance readiness assessment 

  • Compliance program development and implementation (including internal and external-facing policies and notice development)

  • Inventory data and mapping data flows

  • Privacy and data security assessments

  • Risk management

  • Tracking legislative and regulatory developments (CCPA and beyond)

  • Vendor contract drafting and review

  • Identifying, engaging and managing/supporting IT team members, consultants, and solutions
Partner
Email (202) 342-8603(202) 342-8603
Alysa Hutnik chairs the firm’s Privacy and Information Security practice and delivers comprehensive expertise in all areas of privacy, data security and advertising law.  Her experience ...
Partner
Email (202) 342-8576(202) 342-8576
Gonzalo Mon’s practice is focused on marketing and advertising law.  He advises a wide range of companies in all aspects of promoting their brands, and works closely with them to find pr...
Partner
Email (202) 342-8588(202) 342-8588
Dana Rosenfeld is a member of the firm’s Executive Committee and past chair of the firm’s Privacy and Information Security practice.  A former assistant director of the Federal Tra...
Senior Associate
Email (202) 342-8557(202) 342-8557
Katie Townley is a senior associate in the firm’s Washington, D.C. office. Her practice focuses on advertising and marketing, privacy and information security, product safety, and other consu...
Associate
Email (202) 342-8620(202) 342-8620
Khouryanna DiPrima is an associate in the Advertising and Marketing and Privacy and Information Security practice groups.  Khouryanna’s practice focuses on advertising and marketing, pri...
Associate
Email (202) 342-8634(202) 342-8634
Alexander Schneider specializes in information privacy and security, advertising and marketing, and consumer protection law.  He focuses on providing clients with practical legal advice on com...

Publications

October 15, 2019 | Newsletters
October 1, 2019 | Newsletters
September 28, 2019 | Newsletters
August 28, 2019 | Newsletters