CCPA Draft Regulations Released and Amendments Signed into Law

October 21, 2019 Advisory

On Oct. 10, California Attorney General Xavier Becerra released draft regulations for the California Consumer Privacy Act of 2018 (CCPA). Currently, interested parties may submit comments electronically or at four in-person public forums in Sacramento (Dec. 2), Los Angeles (Dec. 3), San Francisco (Dec. 4) and Fresno (Dec. 5). The deadline for submission of written comments is Dec. 6, 2019.

The draft regulations include guidance on the following critical topics:

  • Busines s Practices for Handling Consumer Requests;
  • Verification of Requests;
  • Special Rules Regarding Minors; and
  • Nondiscrimination.

On Oct. 11, 2019, Gov. Gavin Newsom signed into law the six CCPA amendment bills passed by the California legislature. While these amendments covered critical topics such as required mechanisms for effecting a data subject access request, de-identified and aggregate data, a vehicle warranty/recall exemption, and data broker registration, perhaps the most significant changes to the law are those that largely exempt personal data processed in the human resources and business-to-business (B2B) contexts from the scope of law for a one-year period.

The final regulations are expected sometime in early 2020 for the law that will go into effect on Jan. 1, 2020. Enforcement of the CCPA is scheduled to begin July 1, 2020.

Armstrong Teasdale attorneys across disciplines routinely advise and conduct risk assessments for a range of clients — from internet startups to Fortune 100 companies — related to data privacy. Our firm established one of the first Privacy and Data Security practices in the Midwest and is dedicated to solving domestic and international privacy and data security matters. Our skilled attorneys include California-licensed employment counsel as well as Certified Information Privacy Professionals in the U.S. and abroad, Certified Ethical Hackers (C|EH) and professionals with extensive experience counseling clients on compliance with CCPA and the Global Data Protection Regulation (GDPR).

Contact Us
  • Worldwide
  • Boston, MA
  • Denver, CO
  • Edwardsville, IL
  • Jefferson City, MO
  • Kansas City, MO
  • Las Vegas, NV
  • New York, NY
  • Philadelphia, PA
  • Princeton, NJ
  • Salt Lake City, UT
  • St. Louis, MO
abstract image of world map
Boston, MA
225 Franklin Street
26th Floor
Boston, MA 02110
Google Maps
Boston, Massachusetts
Denver, CO
4643 S. Ulster St.
Suite 800
Denver, CO 80237
Google Maps
Denver, Colorado
Edwardsville, IL
115 N. Second St.
Edwardsville, IL 62025
Google Maps
Edwardsville, Illinois
Jefferson City, MO
3405 W. Truman Boulevard
Suite 210
Jefferson City, MO 65109
Google Maps
Jefferson City, Missouri
Kansas City, MO
2345 Grand Blvd.
Suite 1500
Kansas City, MO 64108
Google Maps
Kansas City, Missouri
Las Vegas, NV
3770 Howard Hughes Parkway
Suite 200
Las Vegas, NV 89169
Google Maps
Las Vegas, Nevada
New York, NY
919 Third Ave., 37th Floor
New York, NY 10022
Google Maps
New York City
Philadelphia, PA
2005 Market Street
29th Floor, One Commerce Square
Philadelphia, PA 19103
Google Maps
Philadelphia, Pennsylvania
Princeton, NJ
100 Overlook Center
Second Floor
Princeton, NJ 08540
Google Maps
Princeton, New Jersey
Salt Lake City, UT
257 East 200 South
Suite 350
Salt Lake City, UT 84111
Google Maps
Salt Lake City, Utah
St. Louis, MO
7700 Forsyth Blvd.
Suite 1800
St. Louis, MO 63105
Google Maps
St. Louis, Missouri