CCPA Launches Data Broker Registration Website
The California Consumer Privacy Act (CCPA) is a new landmark privacy law that formally went into effect on January 1, 2020, imposing additional requirements on covered entities, including data brokers.
Under the CCPA, data brokers — entities that knowingly collect and sell information tied to consumers with whom the business has no direct relationship — are required to register and, in many cases, provide additional information in their privacy policy disclosures. While the registration requirements for entities dealing in four million or more records are spelled out in the draft regulations, the system to register has only just officially opened as of Monday, January 6, with an annual registration deadline of January 31.
What to Do?
If a company qualifies as a data broker, it must consider these requirements and take prompt steps to register, given that the deadline is fast approaching. Additionally, for each year that an entity meets the definition of “data broker,” it must re-register by January 31 of the following year.
To register, a data broker must first create an account, available here. In addition to creating an account, a $360 fee is charged at registration. Failure to register is subject to injunction and civil penalties, fees, and costs. The civil penalty is $100 for every day a data broker fails to register.
For more information and to discuss if you may qualify as a data broker, or to otherwise discuss questions involving the CCPA, please contact Eva Pulliam, Christine Chong, or the Arent Fox attorney with whom you regularly work.
- Related Practices