Partner Aaron Tantleff was quoted in the MarTech Today article, “CCPA Enforcement Begins Now and Most Companies Aren’t Ready,” about what businesses need to know as CCPA enforcement begins.
Tantleff said that the law may not apply to everyone, but also cautioned that it has widespread geographic application. “We have spoken with many clients that have called in a panic to discover that CCPA does not apply. The applicability of the CCPA, like the GDPR, is not limited to only those organizations based in California. It may apply to organizations that lack any physical presence in the State.”
Tantleff advised business to document everything. “By now, organizations should have a robust set of security measures in place. However, under the CCPA, an organization must demonstrate that it has implemented reasonable security measures designed to protect personal information based upon the nature and sensitivity of that information.”