The general advice is “Use GDPR as your base and tweak for each jurisdiction”. We’re almost there for California in terms of the tweaks. Watch for more articles analysing what is means for businesses operating in this market…:
[…] The Attorney General, in a statement filed with the regulations, requested expedited review of the regulations, despite the additional time provided by the Executive Order. The statement cited the CCPA’s July 1, 2020 statutory deadline to finalize the regulations and described the lengthy and extensive rulemaking process undertaken by the Attorney General’s Office. The statement requested that the OAL complete its review of the regulations within thirty business days so that enforcement can begin on July 1. The statement also said that once the final regulations are adopted, the Attorney General will begin enforcement of the regulations and will provide guidance to businesses for how to comply.
We will be reviewing the regulations in detail over the next several days so stay tuned for a more detailed analysis of the final regulations. We will also be looking forward to guidance from the Attorney General to businesses regarding compliance with the law and regulations.