California Consumer Privacy Act (CCPA)
California Consumer Privacy Act (CCPA)
The California Consumer Privacy Act (CCPA) took effect on January 1, 2020. This regulation brings significant change to the U.S. privacy and data protection law landscape, and serves as a harbinger of a potential wave of additional consumer data privacy regulations at the state and even federal level, much as the General Data Protection Regulation (GDPR) has changed how business is done in the EU and beyond.
Our approach to CCPA compliance begins with a clear and nuanced understanding of the statute, including both existing provisions, as well as the “unknowns” and associated risk factors based on anticipated changes or clarifications to the law.  To support your CCPA readiness efforts, we will prepare and assist as needed in implementing a plan that features plain-language, practical steps toward compliance, leverages your existing privacy compliance and customer notice programs and mechanisms to the fullest extent possible and well-reasoned and risk-based analysis to address the more ambiguous CCPA provisions.

Our team is deeply familiar with the implications of the CCPA and other legislative proposals, and we provide clients with customized, practical advice regarding:
 
  • Compliance readiness assessment 

  • Compliance program development and implementation (including internal and external-facing policies and notice development)

  • Inventory data and mapping data flows

  • Privacy and data security assessments

  • Risk management

  • Tracking legislative and regulatory developments (CCPA and beyond)

  • Vendor contract drafting and review

  • Identifying, engaging and managing/supporting IT team members, consultants, and solutions
 
 

Overview

The California Consumer Privacy Act (CCPA) took effect on January 1, 2020. This regulation brings significant change to the U.S. privacy and data protection law landscape, and serves as a harbinger of a potential wave of additional consumer data privacy regulations at the state and even federal level, much as the General Data Protection Regulation (GDPR) has changed how business is done in the EU and beyond.
Our approach to CCPA compliance begins with a clear and nuanced understanding of the statute, including both existing provisions, as well as the “unknowns” and associated risk factors based on anticipated changes or clarifications to the law.  To support your CCPA readiness efforts, we will prepare and assist as needed in implementing a plan that features plain-language, practical steps toward compliance, leverages your existing privacy compliance and customer notice programs and mechanisms to the fullest extent possible and well-reasoned and risk-based analysis to address the more ambiguous CCPA provisions.

Our team is deeply familiar with the implications of the CCPA and other legislative proposals, and we provide clients with customized, practical advice regarding:
 
  • Compliance readiness assessment 

  • Compliance program development and implementation (including internal and external-facing policies and notice development)

  • Inventory data and mapping data flows

  • Privacy and data security assessments

  • Risk management

  • Tracking legislative and regulatory developments (CCPA and beyond)

  • Vendor contract drafting and review

  • Identifying, engaging and managing/supporting IT team members, consultants, and solutions
Partner
Email (202) 342-8603(202) 342-8603
Alysa Hutnik chairs the firm’s Privacy and Information Security practice and delivers comprehensive expertise in all areas of privacy, data security and advertising law.  Her experience ...
Partner
Email (202) 342-8453(202) 342-8453
Aaron Burstein serves clients with a strong technical background and a passion for solving complex privacy, data security, and consumer protection law problems.  He provides legal advice on pr...
Partner
Email (202) 342-8576(202) 342-8576
Gonzalo Mon’s practice is focused on advertising, transactional, and privacy issues.  He advises a wide range of companies in all aspects of promoting their brands, and works closely wit...
Partner
Email (202) 342-8588(202) 342-8588
Dana Rosenfeld serves as managing partner of Kelley Drye, and is a member of the firm’s Executive Committee and past chair of the firm’s Privacy and Information Security practice.&...
Senior Associate
Email (202) 342-8557(202) 342-8557
Katie Townley is a senior associate in the firm’s Washington, D.C. office. Her practice focuses on advertising and marketing, privacy and information security, product safety, and other consu...
Associate
Email (202) 342-8634(202) 342-8634
Alexander Schneider specializes in information privacy and security, advertising and marketing, and consumer protection law.  He focuses on providing clients with practical legal advice on com...

Publications

06/27/2020 | Newsletters
06/13/2020 | Newsletters
06/06/2020 | Newsletters
05/23/2020 | Newsletters