On June 28, 2018, Gov. Jerry Brown, D-Calif., signed the California Consumer Privacy Act of 2018 into law, which establishes new privacy rights for California residents and new obligations for businesses operating in California, effective Jan. 1, 2020. The CCPA was amended via SB 1121 in September 2018, and a number of additional technical and substantive amendments have been proposed, while implementing regulations have yet to be passed. It's hard to keep track of the changes, but here are the latest CCPA provisions and exemptions relevant to health care providers, drug and device manufacturers, biotech companies and their respective service providers, as well as digital health and other companies engaged in health care delivery.
CCPA scope
The CCPA applies to for-profit companies that do business in California and meet one or more of the following criteria: have more than $25 million in annual gross revenue; buy, receive, sell or share the personal information of 50,000 or more consumers or devices; or derive 50% or more of their annual revenue from selling consumers’ personal information.
To continue reading, please visit iapp.org.