Are You CCPA Compliant? Do you know the CCPA Requirements?
In just over 4 minutes, John-Scott will briefly describe the Act, whether you are required to comply, and why you should consider compliance anyway!
The fact is consumers don’t want to experience another data breach. They want to know what information you have about them (consumer data inventory) and that they can delete personal information from your system. They want to know if you sell their information, and that they can deny the sale of personal information. While it is designed to protect California residents, it will have an impact on businesses and consumers across the United States.
And Now A Word From Our Attorney
Some of you may know that John-Scott is an attorney, but in the video, he makes it clear he’s not your attorney. He also makes it clear that you need to consult with your General Counsel regarding the CCPA regulations and whether or not you have a duty to comply legally.
An attorney will help you map out all of the categories of personal information you collect. They’ll help you document, and if necessary, negotiate SLAs (Service Level Agreements) with 3rd parties who come in contact with the personal data you collect.
They’ll also help you think through GDPR compliance. Both CCPA and GDPR are so closely related, with a bit of effort you can make your business compliant with both (if necessary). Another important reason to have your general counsel involved is that the California Attorney General may make modifications to the Act prior to the deadline. Your attorney needs to stay on top of it.
If you are concerned about CCPA readiness and don’t have a General Counsel, we recommend Contract General Counsel. These guys operate off the same model as Aidan Taylor Marketing – scalable professional services on-demand to supplement or as a measure to fill the gap when you lack in-house resources.
After you’ve worked with your attorney, Aidan Taylor Marketing can help you implement CCPA and GDPR compliance on your WordPress website, even though we’re way past the deadline. The key components of implementation are providing data maps, enabling erasure of collected data, and the ability to opt-out of the sale of personal information upon consumer request.
Let’s Talk
We’ve been helping companies like yours accelerate their growth since 2004. Let us know how we can start assisting you with your immediate plans for dramatic growth.
Let’s Talk
We’ve been helping companies like yours accelerate their growth since 2004. Let us know how we can start assisting you with your immediate plans for dramatic growth.
CCPA Compliance Video Script
Hey – this is John-Scott for Aidan Taylor Marketing.
Today, I want to talk to you about the CCPA. That’s the California Consumer Privacy Act which goes into effect in January of 2020 (that’s over two years now).
Why should you care? Well, is it has substantial penalties associated with it if your website or business happens to interact with Californians. And, that includes almost anybody with a website.
Don’t panic! There are some pretty big thresholds to meet before you’re required to comply. And, I’m going to cover those in a minute or so.
But first, what is the CCPA trying to do? Well, simply put, it’s about giving consumers in California more control over data collected about them, which includes the ability to erase it or deny the sale of their information to 3rd parties.
You’ve no doubt seen the little pop-ups on many of the websites you visit (see ours below) – they’ll say something like “this website uses cookies to collect information about you – is that okay?” Most of what you see has been fueled by the European Union’s GDPR or General Data Protection Regulation. It is the precursor to the CCPA.
Okay, so the big question is whether you should care about it. Will it affect your business?
The short answer is yes, but not necessarily in the way you might think.
The first question is… And by the way, while I’m an attorney, I’m not your attorney! So please talk to your General Counsel about the CCPA and whether you have an issue. I’m doing this simply to raise awareness and present some marketing concerns, possibly even opportunities!
Okay, the first question is do you have annual revenues exceeding $25 million. If yes, you probably need to comply.
If not, do you buy or sell the data for over 50 thousand Californian consumers, households, or devices? If yes, again you will probably need to comply.
If not, does more than 50% of your annual revenue come from selling the personal information of Californian consumers? If yes, you should probably comply.
If not – you probably don’t have an issue with the CCPA. Again, consult your attorney.
Now here is why you may want to consider compliance – I think Google may end up using compliance as a legitimacy signal (it will be easy for them to detect). Kind of the way they use SSL or a security certificate. It says you’re probably not a fake or illegitimate business – you’re doing the things legitimate businesses would do.
So, if given a choice of sending a Google searcher to a CCPA compliant business versus a non-compliant business – which do you think they’ll choose?
My last point on this and then I’ll shut up – Google isn’t the only one evaluating your legitimacy as a business. Every visitor is going to see more and more CCPA compliance. All of the big companies will be compliant. So, if you want to look like you’re a serious business, you’ll probably want to pony up the grand or so it will take to make your WordPress website compliant (not including legal fees to review your cookie and privacy policies and evaluate your overall compliance).
At Aidan Taylor Marketing, we went ahead and made our website CCPA and GDPR compliant. If you go to our website, you’ll see the telltale notification pop-up in the lower lefthand corner.
Alright – take care and let us know if you need any help regarding CCPA.