U.S. Law Update — the Impact of California's Consumer Privacy Act for Non-U.S. Lawyers

While businesses in Europe are focusing their privacy efforts on GDPR, they should not neglect the California Consumer Privacy Act, which went into effect at the beginning of this year. European companies doing business with California consumers are required to comply with the obligations imposed by the CCPA and should focus on navigating its significant compliance challenges — even if they have no brick-and-mortar presence in the state. While GDPR compliance will go a long way to CCPA compliance, there are differences in the laws that must be accounted for in any privacy compliance program.

Orrick attorneys Amanda Lawrence and Sherry-Maria Safchuk discussed the CCPA, how it compares to the GDPR, and some CCPA challenges that businesses have been facing — including the scope of various exemptions, advertising under the CCPA, and service provider and third-party relationship considerations.