Policy Briefing — California begins CCPA enforcement on July 1, 2020

Executive briefing: The CCPA’s statutory enforcement date arrived on July 1, 2020, enabling the Attorney General to pursue violations of consumer access, deletion, and sale opt-out rights and to seek civil penalties after the 30-day cure period.^{Civ. Code §§1798.100–1798.155; DOJ enforcement notice}

Programme steps

• Validate notices. Confirm privacy policies and point-of-collection notices describe categories of personal information, purposes, and third-party disclosures as required by Sections 1798.100(b) and 1798.130(a)(5).
• Operationalize rights. Ensure intake and response workflows for access, deletion, and sale opt-out requests meet the 45-day timelines and identity verification controls in Section 1798.130.
• Document cures. Record remediation steps taken within the 30-day cure window if DOJ issues a notice of alleged noncompliance, and retain evidence for potential follow-up.

Sources

• California DOJ reminder of CCPA enforcement date
• California Consumer Privacy Act (Cal. Civ. Code §§1798.100–1798.199)

Related briefings

Curated signals from the same pillar or overlapping topics.

Policy · Credibility 92/100 · August 14, 2020

Policy Briefing — California OAL approves final CCPA regulations effective immediately

The California Office of Administrative Law approved the Attorney General’s CCPA regulations on August 14, 2020, filing them with immediate effect and clarifying notices, request handling, and verification standards.

Policy · Credibility 94/100 · July 16, 2020

Policy Briefing — Schrems II voids Privacy Shield and tightens SCC due diligence

The CJEU’s Schrems II judgment invalidated the EU–U.S. Privacy Shield and reaffirmed Standard Contractual Clauses while requiring exporters to assess destination surveillance regimes and apply supplementary safeguards…

Policy · Credibility 93/100 · September 18, 2020

Policy Briefing — Brazil’s LGPD enters into force with immediate controller obligations

Brazil’s Lei Geral de Proteção de Dados became effective on 18 September 2020, activating lawful basis, transparency, data subject response, and processor oversight duties ahead of administrative sanctioning in August…

Policy · Credibility 89/100 · September 29, 2020

Policy Briefing — California extends CCPA employee and B2B exemptions via AB 1281

Governor Newsom signed AB 1281 on September 29, 2020, extending the CCPA’s partial exemptions for employee and business-to-business data until January 1, 2022, preserving limited notice and breach liability duties in the…

Policy · Credibility 88/100 · November 3, 2020

Policy Briefing — California Privacy Rights Act Approved

Detailed implementation playbook for the California Privacy Rights Act, covering new rights, contracting duties, governance models, automated decision-making, and program management through 2023 enforcement.

Continue in the Policy pillar

Return to the hub for curated research and deep-dive guides.

Visit pillar hub

Latest guides

• Semiconductor Industrial Strategy Policy Guide — Zeph Tech

  Coordinate CHIPS and Science Act, EU Chips Act, and Defense Production Act programmes with capital planning, compliance, and supplier readiness.

• Digital Markets Compliance Guide — Zeph Tech

  Implement EU Digital Markets Act, EU Digital Services Act, UK Digital Markets, Competition and Consumers Act, and U.S. Sherman Act requirements with cross-functional operating…

• Export Controls and Sanctions Policy Guide — Zeph Tech

  Integrate U.S. Export Control Reform Act, International Emergency Economic Powers Act, and EU Dual-Use Regulation requirements into trade compliance, engineering, and supplier…