February 26, 2020

February 25, 2020

Subscribe to Latest Legal News and Analysis

February 24, 2020

Subscribe to Latest Legal News and Analysis

Proposed Regulations Under the California Consumer Privacy Act

On October 10, 2019, the California Attorney General issued proposed regulations under the California Consumer Privacy Act (CCPA). The Attorney General will hold four public hearings, on December 2 through December 5, 2019, during which statements or comments may be presented, orally or in writing. Written comments in addition to those submitted at the public hearing also may be mailed or emailed to the Attorney General’s office until 5:00 p.m. on December 6, 2019.

The proposed regulations focus on the form and content of required notices and disclosures, practices for handling of consumer requests, practices for verifying the identity of the consumer making those requests, practices regarding the personal information of minors, and the offering of financial incentives as contemplated by the CCPA. 

The proposed regulations do not, however, address a number of interpretive issues in the CCPA with which businesses are struggling. For example, the proposed regulations do not address whether the $25,000,000 annual gross revenue threshold that causes a company to be subject to the CCPA is based on worldwide or United States revenue or only California revenue (we believe it probably is not limited to California revenue, but that is not absolutely clear). In addition, while the proposed regulations provide certain standards for verifying the identities of individuals who make requests for information or requests for the deletion of their personal information, they do not provide any guidance on the steps that a business can take to confirm that an individual is in fact a resident of California and thus entitled to the protections of the CCPA. The proposed regulations also do not address the scope of certain exceptions from the CCPA, including the potentially very important exception for personal information that is collected, processed, sold, or disclosed pursuant to the federal Gramm-Leach-Bliley Act.

The day after the Attorney General announced these proposed regulations, California Governor Newsom signed five bills amending the CCPA. 

Copyright 2020 K & L Gates


About this Author

Linda C. Odom, KL Gates, data processing outsourcing lawyer, ecommerce matters attorney

Linda Odom concentrates her practice on representing technology companies and technology users in licensing, software development, data processing outsourcing, intellectual property and e-commerce matters and related litigation. On the corporate side of her practice, Ms. Odom focuses on technology agreements and compliance issues in the banking and payments industries.

Since negotiating the technology agreements for the world’s second Internet only bank in 1996, she regularly handles technology, service and customer agreements on behalf of a...


John ReVeal is a partner in the firm’s Washington, D.C. office and a member of the consumer financial services practice group. He advises banks and other financial services providers on consumer compliance and assists financial institutions in the review and development of Bank Secrecy Act and Anti-Money Laundering programs.

In addition, Mr. ReVeal advises financial institutions regarding bank and thrift powers, federal preemption, exportation of rates and charges, and financial institution licensing.