The California Consumer Privacy Act of 2018 (AB 375) was passed on June 28th, 2018 (“CCPA”). Similar to the GDPR, the CCPA will require companies in scope to enhance their data management practices, expand their individual rights processes, and update their privacy policies by the January 1, 2020 deadline. Those who have helped their companies prepare for the GDPR compliance date know the importance and benefit of starting early. While they may have a head start, creating processes to manage these new and ongoing compliance obligations under the CCPA will be a large undertaking for any company in scope.
There are several advantages of starting early. The biggest advantage is having time to obtain the budget and resources needed to close any gaps. Many times budgets are submitted several quarters before resources are allocated, so getting a head start can ensure adequate funding for the technology or services needed to become compliant. Another advantage of starting early is that your team can find people with the skills and knowledge necessary to join the privacy team, if needed. Oftentimes finding and then hiring additional team members with the right experience can be quite difficult.
If your company is continuing its GDPR remediations and programs, you can also take advantage of that work and use it to help complete any remediations for CCPA. The resources used for GDPR can determine the different obligations for CCPA and resources can be distributed accordingly. Privacy teams can monitor the landscape for CCPA guidance specifics and fine tune any privacy programs as 2020 draws closer. If your company does not have to comply with GDPR, CCPA will have many new requirements that will take time to address, such as new consumer rights.
Getting started on your compliance plan as soon as possible will allow your privacy teams to thoughtfully design a program and controls that will ensure consistency with existing and future privacy work at your company.
Make sure to register for our upcoming webinar, “California Consumer Privacy Act: What you Need to Know” on July 25th to hear from TrustArc experts. Register here.
TrustArc has technology solutions and expert consultants to help your company. To find out more, contact us today.