Client Alerts & Insights
CCPA Applicability Cheat Sheet (and a Special Note for Nonprofits)
December 18, 2019
Authored By:
It’s that time. The December 6, 2019, deadline to submit comments on the proposed California Consumer Privacy Act (CCPA) regulations has come and gone and the CCPA will go into effect in 14 days. Submitted comments—1,726 pages in total—are available for our (and your) reading enjoyment on the California Attorney General’s website.[1]
Across the country and the rest of the world, organizations are in various stages of preparing for the impending go-live of the CCPA. For those who are closer to the starting line than they may realize (or want to admit), Benesch Law has prepared a CCPA Applicability Cheat Sheet to help guide organizations through and around that threshold question: Does the CCPA apply to me?
But wait. Asking whether or not the CCPA “applies” to a given person or entity runs the risk of oversimplifying the CCPA and the respective reaches of the law’s various arms and legs. The nature of the CCPA’s applicability depends on your role—Business? Service provider? Individual resident? Data point? So, in the name of precision, how about this: Am I a “business” under the CCPA and therefore subject to the CCPA’s notice, disclosure, deletion, and related obligations?
Nonprofit organizations should carefully review the second of the two ways in which an entity can be a “business” under the CCPA. If a nonprofit shares common branding with a for-profit entity that is subject to the CCPA and the nonprofit either controls or is controlled by that for-profit entity, the nonprofit will be pulled into the CCPA as a result of that relationship.
Service providers of nonprofits should also take note: under the draft CCPA regulations (emphasis on draft), if you provide services to an entity that does not qualify as a “business” but you otherwise meet the definition of “service provider,” you will be considered a “service provider” of that entity under the CCPA.
Take a look at our cheat sheet to get this conversation started and to explore the scope of “personal information” covered by the CCPA.
[1] https://oag.ca.gov/privacy/ccpa
For more information, contact a member of the firm’s Intellectual Property/3iP Practice Group.
Michael D. Stovsky at mstovsky@beneschlaw.com or 216.363.4626.
Alison K. Evans at aevans@beneschlaw.com or 216.363.4168.
Kristopher J. Chandler at kchandler@beneschlaw.com or 614.223.9377.
Latest News
Owner-Operators and Federal Leasing Regulation Compliance: Legal Q&A
Key Takeaways: The longstanding practice of many motor carriers operating through independent contractor owner-operators remains today despite the many legal …
Group Defamation Claims and the Evolving Limits of the Group Libel Doctrine
Courts are increasingly willing to look beyond the traditional small-group requirement when assessing whether an allegedly defamatory statement is “of and concerning” a particular plaintiff. Recent decisions suggest that audience perception and real-world impact may matter as much as group size.
HRSA’s Revised 340B Rebate Pilot Drama
The Health Resources and Services Administration’s revised 340B Rebate Model Pilot would replace up-front discounts with post-purchase rebates for 21 drugs beginning January 1, 2027, requiring covered entities to pay full wholesale acquisition cost and submit claims data to recover the 340B discount.
Restrictions on Foreign Interests in the Transportation and Logistics Sector: A Look Ahead
The transportation and logistics industry is not immune from rising concerns about foreign investment. Since the start of this Administration, the U.S. Department of Transportation has steadily turned focus to perceived threats against both public safety and purely domestic operators by non-U.S. interests in the sector.