Let’s update the data on the CCPA as of 2022, as well as similar bills in the US.
The CCPA itself is available here. FAQ on basic questions.
Proposed changes and official notices can be found on the official website.
In addition, interesting information about the applicability of the GDPR in the context of the CCPA is available here.
In addition, at the moment, in various US states, the implementation of requirements for the protection of personal data, similar to the CCPA, is being actively considered.
In what states will it be introduced?
Lawmakers in Arizona, Connecticut, Florida, Mississippi, Minnesota and Washington have confirmed they are preparing bills for introduction, and a Maryland senator tentatively filed the bill last year. Bills introduced last year in Alaska, Massachusetts, New York, North Carolina, Ohio, Oklahoma, South Carolina and Vermont will be considered in 2022. There is a high probability that other states will follow.
On the other hand, lawmakers in Illinois and Utah will not support the law in 2022. There are no meetings planned for Montana, Nevada, North Dakota, or Texas this year.
More detailed information on the status of consideration of similar bills in the US states is available here.
If we talk about fines, then at the moment they do not look scary – $ 7,500 for each violation or the right to claim $ 750 for victims. Against this background, a penalty of 4% of last year’s turnover under the GDPR seems to be a much more serious problem.
But considering how many states are developing similar requirements and prerequisites for the precedent on the differences between the CCPA and the GDPR and, as a result, its inapplicability to the full, it is necessary to monitor the planned changes in this legal field very carefully and in a timely manner.