CCPA and Cookies. What do I need to know?
In this article, we explain the basics of cookies and CCPA.
CCPA is the California Consumer Privacy Act, which was passed by California legislators in June 2018. It’s the most comprehensive law in the USA which is targeted at companies that collect and/or sell personal information and gives private individuals and companies, that are based in California, more control over their own data.
CCPA introduces three major new data protection, including:
- The right to access information. It means that California consumers will be able to know which categories of information are used or sold, from whom and why certain information was collected, etc.
- Right to deletion. Any consumer will be able to ask to delete personal information that was collected about him/her.
- Right to opt-out. Similar to the GDPR, they will be able to direct a company to not sell their personal information to third parties.
The new legislative initiative will go into effect on January 1, 2020. At the same time, some CCPA issues are still in the process of clarifying and amending by local legislators. As a result, several amends were already passed and California attorney general enforcement is not expected until at least July 1, 2020.
CCPA and Cookies
The notice on collection contains the following:
- The categories of personal information you collect
- The purposes of data collection
- Information on the right to opt-out of sale of consumers’ personal information, if you sell such information and
The consumer doesn’t have to take any action about it, such as clicking an “Accept” button. That’s not required.
You need just to show the notice and your cookies are good to go.
Want to try
Get your free cookie banner up and running today!
That also interest you
Data Subject Access Requests: Do's and Don’ts in Handling GDPR DSARs
Data Subject Access Requests (DSARs) are one of the less-talked-about GDPR requirements, but failure to handle them correctly could land your company in trouble.
ePrivacy Regulation vs GDPR: 4 Key Differences
The ePrivacy Regulation was set to come into force alongside the GDPR on May 25, 2018, but delays in the approval phase meant its implementation was delayed.
EDPB Guidelines on Targeting Social Media Users: 4 Quick Compliance Tips
EDPB guidelines on targeting social media users published in September 2020 bring new GDPR compliance obligations that social media service providers and targeters need to adopt.