After several rounds of comment periods and amendments, California Attorney General Xavier Becerra submitted the latest round of proposed rules this week for the California Consumer Privacy Act.
Becerra’s timing caught industry by surprise as the U.S. grapples with protests following the killing of George Floyd, an economic contraction and a pandemic.
“I’m still in shock,” Heather Federman, VP of Privacy & Policy at data privacy firm BigID, told CIO Dive, referring to the timing of the rules’ publication. The latest proposal might get lost in the shuffle.
But Becerra, on a July 1 enforcement deadline for finalized language, requested an expedited review of the proposal. Companies dealing with the economic downturn have to also contend with the country’s first comprehensive data privacy law.
Some companies with the resources, such as Microsoft, are broadly applying the CCPA’s rights across customers. However, not all businesses have the resources to provide universal compliance; 50 laws for each state could become a compliance conundrum.