The enactment of the California Consumer Privacy Act (CCPA) will radically change privacy and data protection in the United States when it goes into effect on January 1, 2020, providing consumers with expansive privacy rights and more control over the personal information that businesses collect about them. Every company with a California nexus will need to evaluate and implement changes across business lines to comply with the CCPA. And every company also will need to closely monitor similar laws and regulations enacted in other states (and countries), ensuring that the privacy compliance program developed addresses any potential impact of the changing legal and regulatory landscape.