The California Consumer Privacy Act (CCPA) was the first comprehensive US state privacy legislation and was passed in June of 2018, becoming effective January 1, 2020. The Act gives California citizens more control of their personal information and requires organizations to better safeguard information from unauthorized use and access.
The legislation provides citizens the right to know what data companies collect on them, the right to tell companies not to share or sell their personal data and provides sanctions and remedies against organizations that fail to safeguard and use California citizen personal information properly.
The CCPA has two enforcement provisions. First, the California AG can bring action against companies for violations. Second, consumers can initiate private action in the case of a data breach. CCPA provides guidelines for statutory damages or the consumer may try to prove actual damages.