Potential CCPA Amendments Gain Traction in the California Legislature
On April 23, 2019, the California Assembly Privacy and Consumer Protection Committee voted to advance several key amendments to the California Consumer Privacy Act (CCPA), which are outlined below. If these amendments pass into law, they would limit the scope of the CCPA.
AB 25 – Employment Information Exclusion
This bill seeks to clarify that the definition of “consumer” does not include an employee acting within their scope as an employee. Accordingly, personal information of job applicants, employees, contractors, or agents of the business collected for employment purposes would not be covered by the CCPA.
AB 873 – Narrowing of “Personal Information” Definition
This bill seeks to revise the definition of “Personal Information” (PI) to exempt: (1) information that “identifies, relates to, describes,” or “could be linked” to a “household,” and (2) information that “is capable of being associated with” a consumer.
This bill also seeks to revise the definition of “deidentified information,” which is excluded from PI, to mean information “that does not reasonably identify, or link, directly or indirectly, to a particular consumer,” provided the business does not attempt to reidentify the data and takes “reasonable” steps to keep it deidentified. This is arguably narrower than the previous definition, which included information that could be “capable of being associated with” a consumer.
AB 1564 – Permitting One Method for Consumer Requests
This bill seeks to change the requirement that a business provide two or more designated methods for submitting requests for information. Instead, a business could include either a toll-free telephone number or an email address (and require an email address if a business operates a website).
AB 846 – Customer Loyalty Programs and Other Exceptions to Non-Discrimination Statute
This bill seeks to revise the non-discrimination statute, which prevents a business from offering a different price or quality of goods or services to a consumer in exchange for PI, to provide three exceptions:
AB 981 – Insurance Information Exclusion
This bill would exempt from the CCPA insurance institutions, agents, and support organizations subject to the Insurance Information and Privacy Protection Act (IIPPA). The bill would also add some CCPA-like provisions (such as notice requirements) to the IIPPA.