California Consumer Privacy Act: Takeaways from Final California Attorney General Forum

The attorney general is now developing draft regulations to provide compliance guidelines under the CCPA, which takes effect Jan. 1, 2020.

3/13/2019 8:00 AM

California Consumer Privacy Act: Takeaways from Final California Attorney General Forum

The California Attorney General’s Office recently concluded public forums on the California Consumer Privacy Act (CCPA) as it prepares to enact the law while considering stakeholders’ feedback.

Washington, D.C.-based ACA International member company Holland & Knight, which also has offices in California, provided a summary of the final forum held March 5.

The CCPA, which takes effect Jan. 1, 2020, requires companies to tell consumers―upon request―what personal data they possess, why they have the data and if third parties have access to it, ACA International previously reported. Consumers may ask companies to delete their personal data and request that they do not sell it.

The state’s attorney general is developing regulations to facilitate consumers’ rights under the CCPA and provide businesses with compliance guidelines.

According to Holland & Knight San Francisco-based partners John P. Kern and Ashley Lynn Shively, common themes during the forum included:

  • The need for clarification of ambiguities and to eliminate gaps in the definitions of key terms in the law. “Others expressed concern that terms could not be accurately defined unless and until the [attorney general] obtained a deeper understanding of the realities of data transfers in digital ecosystems,” they said.
  • Attendees at the forum encouraged the attorney general to use the rulemaking process to align the CCPA with the European Union’s General Data Protection Regulation.
  • Enforcement authority should be assigned to local authorities “in order to fulfill the law’s enforcement mandate,” they said. “Relatedly, business representatives emphasized the need for time to come into compliance after the rulemaking process is complete. Absent recognition of this reality in the regulations, businesses reasonably fear a wave of consumer litigation [in] January, as private actions are not subject to the July 2020 enforcement date applicable to government-filed actions.”

Kern and Shively report that the attorney general’s office expects to release its Notice of Proposed Regulatory Action by fall 2019. There will be another public comment process after the draft regulations are released.

Read more takeaways from the final public forum from Holland & Knight.

Related Content from ACA International:

Takeaways from First Forum on California Consumer Privacy Act

From the Web: Business Leaders Concerned about Privacy Laws in California

If you are interested in sharing articles and analysis on legal cases, industry laws and regulations or other relevant topics for possible publication with ACA International, email our Communications Department at

Follow ACA International on Twitter @ACAIntl and @acacollector, Facebook and request to join our LinkedIn group for news and event updates. ACA International members are welcome to submit news items for possible publication to Visit our publications page for news submission guidelines and subscriptions to ACA Daily, Collector magazine and Pulse.

Advertising is available for companies wishing to promote their products or services. Be sure to visit the ACA Events Calendar on the Education and Training page to view our listing of upcoming CORE Curriculum and Hot Topic seminars featuring critical educational opportunities for your company.

Subscribe to ACA Daily NEWSROOM