{"id":17805,"date":"2020-10-29T16:28:25","date_gmt":"2020-10-29T23:28:25","guid":{"rendered":"https:\/\/www.primeview.com\/?p=17805"},"modified":"2022-07-26T16:11:09","modified_gmt":"2022-07-26T23:11:09","slug":"want-to-play-in-california-you-need-ccpa-compliance","status":"publish","type":"post","link":"https:\/\/www.primeview.com\/blog\/want-to-play-in-california-you-need-ccpa-compliance\/","title":{"rendered":"Want to \u2018Play\u2019 in California? You Need CCPA Compliance"},"content":{"rendered":"

Data \u2013 More valuable than oil<\/b><\/h3>\n

The fourth industrial revolution, which we are moving into rapidly, is preceded by a digital economy based fundamentally on information.\u00a0<\/span><\/p>\n

Oil, for a long time, has been considered the most valuable resource in the world. Now technology is changing the world very fast. In this new digital world, data gathered online is now the world\u2019s most valuable resource.\u00a0<\/span><\/p>\n

Wherever data is coming from, one thing is certain; all information has a monetary value. Humans have become intangible beings online, merchandized, giving out personal data to a computer system embedded in web pages.<\/span><\/p>\n

Personal data misuse is a concern that raises fundamental questions about privacy, ownership of information, and human rights. Personal data that can be compromised or stolen by cybercriminals are subject to identity theft, monetary theft, fraud, public embarrassment, and other harms.<\/span><\/p>\n

For this problem, we can first start with a website having an <\/span>SSL certificate<\/span><\/a>. To protect their data and build their trust, you must have some online security level for those who visit your business website. You are not legally required to have SSL certificates, but it will surely hurt your business if not.\u00a0<\/span><\/p>\n

Obey the law!<\/b><\/h3>\n

Personal data protection has become important enough that laws are now in place to help ensure the proper handling and use of data. At PrimeView, we have always held data security as a top priority. We are always alert to new security regulations and laws that may affect our clients.\u00a0<\/span><\/p>\n

One of the essential legal requirements for all websites has been the <\/span>ADA, Americans with Disabilities Act<\/span><\/a>. While not a personal data security regulation, the act outlined features websites must have to make websites accessible to those with disabilities.\u00a0<\/span><\/p>\n

If your company does business and targets or collects data related to people in the EU, then the law requires you to have GDPR compliance. <\/span>The General Data Protection Regulation<\/span><\/a>, the strictest privacy, and security law globally, went into effect on May 25, 2018. The GDPR levy\u2019s severe fines for business violating its privacy and security standards.<\/span><\/p>\n

California Consumer Privacy Act<\/b><\/h3>\n

A newer law took effect in January 2020 exclusively for California-based businesses or companies that do business in California. The law creates a set of obligations for companies and rights for consumers.\u00a0<\/span><\/p>\n

The California Consumer Privacy Act (CCPA) broadly expands the RIGHTS OF CONSUMERS and requires businesses within scope to be SIGNIFICANTLY MORE TRANSPARENT about how they collect, use, and disclose personal information.<\/span><\/p>\n

How to determine whether the CCPA applies to your business.<\/b><\/h3>\n

The CCPA applies to any company that collects or provides the personal information of California residents AND meets one or more of the following criteria:\u00a0<\/span><\/p>\n

    \n
  1. You are a for-profit business that has $25 million or more in annual sales.\u00a0<\/span><\/li>\n
  2. You buy, sell, or share information on 50,000 or more individuals, households, or devices.<\/span><\/li>\n
  3. Derive more than half of your annual revenue from selling personal information.<\/span><\/li>\n<\/ol>\n

    If you meet those criteria, then we would have to say you have a profitable business!<\/span><\/p>\n

    Consumers Rights<\/b><\/p>\n

    The California Consumer Privacy Act provides \u201cconsumers\u201d (natural persons who are California residents) four fundamental rights concerning their personal information:<\/span><\/p>\n

      \n
    1. Consumers have the right to know:<\/span><\/li>\n<\/ol>\n
        \n
      • What personal data your business collected about them<\/span><\/li>\n
      • What was the source<\/span><\/li>\n
      • For what is it being used<\/span><\/li>\n
      • If it is being disclosed or sold, and to whom it is being disclosed or sold<\/span><\/li>\n<\/ul>\n

        This information needs to be revealed through a general privacy policy that provides more specific information upon request.<\/span><\/p>\n

          \n
        1. The consumer has the right to \u201copt-out\u201d of allowing your business to sell their personal information to third parties.<\/span><\/li>\n
        2. The consumer has the right to tell your business to delete their personal information, with some exceptions.<\/span><\/li>\n
        3. The consumer has the right to receive equal service and pricing from your business, even if they exercise their CCPA privacy rights.<\/span><\/li>\n<\/ol>\n

          Personal information<\/b><\/p>\n

          Under the CCPA, there is a broad scope of \u201cpersonal information\u201d defined as any information that \u201cidentifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.\u201d<\/span><\/p>\n

          There are 11 categories of consumer information under the CCPA:<\/b><\/p>\n

            \n
          1. Name, address, personal identifier, IP address, email address, account name, Social Security number, driver\u2019s license number, and passport number.<\/span><\/li>\n
          2. Personal information under California\u2019s records destruction law (Cal. Civ. Code \u00a7 1798.80(e)), including signature, physical characteristics or description, telephone number, insurance policy number, education, employment, employment history, or financial account information.<\/span><\/li>\n
          3. Characteristics of protected classifications under California or federal law.<\/span><\/li>\n
          4. Commercial information, including records of personal property, products, or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.<\/span><\/li>\n
          5. Biometric information.<\/span><\/li>\n
          6. Internet or other electronic network activity, such as browsing history, search history, and information regarding a consumer\u2019s interaction with a website, application, or advertisement.<\/span><\/li>\n
          7. Geolocation data.<\/span><\/li>\n
          8. Audio, electronic, visual, thermal, olfactory, or similar information.<\/span><\/li>\n
          9. Professional or employment-related information.<\/span><\/li>\n
          10. Education information is not publicly available personally identifiable information, as defined in the Family Educational Rights and Privacy Act (20 USC \u00a7 1232(g), 34 CFR Part 99).<\/span><\/li>\n
          11. Inferences drawn from any of the information listed above to create a profile about a consumer reflecting the consumer\u2019s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.<\/span><\/li>\n<\/ol>\n

            Don\u2019t be penalized<\/b> – <\/span>Contact PrimeView today<\/b><\/h3>\n

            Like Europe\u2019s GDPR, the CCPA also provides penalties if your company exposes unencrypted personal information to theft or misuse.\u00a0<\/span><\/p>\n

            The <\/span>CCPA<\/b> is the most stringent privacy law in the United States. So, it requires some effort and knowledge to be compliant.\u00a0<\/span><\/p>\n

            If you have any questions on how to ensure that your website is in line with CCPQ or GDPR regulations, call PrimeView today. We can provide a CCPA assessment and develop a plan to be compliant.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

            Data \u2013 More valuable than oil The fourth industrial revolution, which we are moving into rapidly, is preceded by a […]<\/p>\n","protected":false},"author":1,"featured_media":18601,"comment_status":"closed","ping_status":"open","sticky":false,"template":"templates\/single-post-full-width-banner-with-sidebar.php","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-17805","post","type-post","status-publish","format-standard","hentry","category-blog"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/posts\/17805","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/comments?post=17805"}],"version-history":[{"count":2,"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/posts\/17805\/revisions"}],"predecessor-version":[{"id":18602,"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/posts\/17805\/revisions\/18602"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/media\/18601"}],"wp:attachment":[{"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/media?parent=17805"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/categories?post=17805"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.primeview.com\/wp-json\/wp\/v2\/tags?post=17805"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}