In June 2018, California enacted a far-reaching law to give California residents the right to know, the right to opt out, and the right to delete. It also places limits on companies’ ability to share personal data and restricts a business’ ability to charge more for a service if a Californian refuses to allow the business to “sell” her personal information. The expansive definitions of the law, which takes effect in 2020, will have broad impact, and may encourage other states to follow suit. Some federal legislators are discussing how to avoid a 50-state solution by enacting a federal privacy statute. Other laws and initiatives seek to broaden consumer privacy protections. How are companies to prepare for these far-reaching developments? What practical compliance steps should be considered now?
Anwesa Paul, Chief Privacy Counsel, American Express
Michael Nonaka, Partner, Covington & Burling LLP
Ryan Smyth, Senior Principal, Promontory