California Passes Final Version of CCPA, but Questions Remain

Lindsey Tonsager spoke with Global Data Review about the recently-passed California Consumer Privacy Act. Ms. Tonsager says the issues the attorney general need to clarify include what a “do not sell my personal information” link should look like on company websites, how that link should be formatted, and where it should be placed. One of the most important things the attorney general has to clarify, she adds, is how to authenticate requests under the CCPA to prevent malicious actors from making fraudulent requests. “Also, the [attorney general] is required to flesh out some of the exceptions, most notably how the exceptions protect IP and trade secrets. He has the authority to clarify the definition of personal information, clarify the format and placement of privacy notices, and a few others.”