Security News > 2020 > June > CCPA: How to prepare for California's new privacy law before enforcement starts July 1
For businesses preparing to comply with California's new data privacy law, the first challenge is figuring out how much data is covered by the law.
Christine Lyon, a partner at Morrison & Foerster and a member of the firm's global privacy and data security group, said that the CCPA establishes a new right that US consumers have never had. She also said that the data protected by the CCPA includes much more than just email address and name.
How to prepare for the CCPA. The law does not specify what kind of security measures companies should take to protect data, so Mendoza recommends that clients follow the top 20 CIS security controls.
Data breach notification: Businesses must notify consumers or enforcement authorities in the event of privacy or security breach.
Lyon said that data privacy advocates in California have already decided that the CCPA is not sufficient and are collecting signatures on a new ballot initiative to strengthen data privacy rights.