United States of America: Introduction of comprehensive California Consumer Privacy Act
Description
Introduction of comprehensive California Consumer Privacy Act
Introduction of the California Consumer Privacy Act, which provides rights to customers including rights of access, portability, deletion, opt-out and relief for breaches regarding personal information.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting, cross-cutting, cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament
Complete timeline of this policy change
Hide details
2018-01-03
under deliberation
2018-06-28
adopted
Key regulatory dimensions
Regulated subjects
The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type
Private organisation
Economic activity
cross-cutting
Category
All
Policy change by business practice
The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data (all forms): data processing
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data (all forms): storage (any form)
Regulatory tool
User right to deletion of personal data
User right to portability of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data (all forms): sale
Regulatory tool
User right to deletion of personal data
User consent: Permit user opt-out
User right to rectification of personal data
User right to withdraw consent
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: information pertaining to minors: sale
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User consent: Opt-in requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data (all forms): transfer (any destination)
Regulatory tool
User right to deletion of personal data
User consent: Permit user opt-out
User right to rectification of personal data
User right to withdraw consent
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: identity: data processing
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: ethnicity: data processing
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: financial or credit information: data processing
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: genetic: data processing
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: sexual orientation: data processing
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: health: data processing
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: biometric: data processing
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: religious beliefs: data processing
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: information pertaining to minors: transfer (any destination)
Regulatory tool
User right to deletion of personal data
User right to rectification of personal data
User consent: Opt-in requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to access personal data
Purpose/processing limitation
User right to nominate a legal heir or representative
Prohibition of discrimination on the basis of exercised user rights
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: identity: transfer (any destination)
Regulatory tool
User consent: Permit user opt-out
User notification requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to nominate a legal heir or representative
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: ethnicity: transfer (any destination)
Regulatory tool
User consent: Permit user opt-out
User notification requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to nominate a legal heir or representative
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: financial or credit information: transfer (any destination)
Regulatory tool
User consent: Permit user opt-out
User notification requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to nominate a legal heir or representative
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: genetic: transfer (any destination)
Regulatory tool
User consent: Permit user opt-out
User notification requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to nominate a legal heir or representative
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: sexual orientation: transfer (any destination)
Regulatory tool
User consent: Permit user opt-out
User notification requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to nominate a legal heir or representative
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: health: transfer (any destination)
Regulatory tool
User consent: Permit user opt-out
User notification requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to nominate a legal heir or representative
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: biometric: transfer (any destination)
Regulatory tool
User consent: Permit user opt-out
User notification requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to nominate a legal heir or representative
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data: religious beliefs: transfer (any destination)
Regulatory tool
User consent: Permit user opt-out
User notification requirement
User right to information about third-parties, with which data has been shared
Corporate right to cure
User right to nominate a legal heir or representative
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1
personal data (all forms): transmission
Regulatory tool
User right to portability of personal data
User right to nominate a legal heir or representative
Right to reward for non-exercise of user rights
Sanctions
Civil penalty
Regulated subjects
1