Friday, February 3, 2023

Initial Draft Regulations for Privacy Act Create Concerns for Business

The California Consumer Privacy Act (CCPA) took effect on January 1, 2020. California businesses appreciate the intent of the CCPA to help consumers protect their online privacy and the effort by the Attorney General to draft regulations that facilitate and encourage compliance.

However, the Attorney General’s draft regulations fail to address many of the ambiguities in the CCPA, impose mandates that may exceed the authority of the CCPA, and levy high costs on all California business sectors.

CalChamber Comments

The California Chamber of Commerce provided extensive comments on the regulations, expressing concern over the lack of clarity in a variety of areas, including: criteria on privacy controls, consumer notification requirements, the definition of personal information, opting out policies, household information, consumer verification and requests for personal information or deletion of information.

The CalChamber also registered concern that the regulations require actions that were not specified in the CCPA in such areas as the de-facto opt-out provisions, the requirement for a “Do Not Sell” button, consumer verification requirements and the calculation of the value of data.

Compliance Costs

Compliance costs associated with the CCPA and the regulations will impose a tremendous burden on the economy and have a significant impact on businesses that are required to comply.

An independent report prepared for the Attorney General estimates compliance costs for the new law to be $55 billion, and up to $16.4 billion to comply with the implementing rules. For initial compliance costs alone, these costs were estimated to be:

• Small companies (with fewer than 20 employees): around $50,000 per company;

• Companies with 20–100 employees: $100,000;

• Companies with 100–500 employees: $450,000;

• Companies with more than 500 employees: $2 million or more.

Staff Contact: Shoeb Mohammed

Shoeb Mohammed
Shoeb Mohammed
Shoeb Mohammed was a CalChamber policy advocate from December 2019 to January 2022. He specialized in privacy and cybersecurity, economic development, technology, telecommunications and elections/fair political practices issues.

Related Articles

Many Privacy Rights Act Provisions Take Effect Jan. 1

Originally passed in 2018 and effective in 2020, the California Consumer Privacy Act (CCPA) is a comprehensive privacy law aimed at enhancing California residents’ privacy rights and consumer protection. To ensure those privacy rights and...

Governor Completes Action on Priority Business Bills

Last Friday, Governor Gavin Newsom completed action on bills sent to him by the Legislature, including priority bills for the California Chamber of Commerce. Just two job killers reached the Governor for action, and he...

California Consumer Privacy Act Will Apply to Employers in 2023

In Episode 160 of The Workplace podcast, CalChamber employment law expert Matthew Roberts and CalChamber policy advocate Ashley Hoffman discuss the current state of the California Consumer Privacy Act (CCPA) and how it will...