What Restaurants Need to Know About CCPA and GDPR
January 1 marked the beginning of a new year and a new decade, but did you know it also marked the kickoff of a new law that gives California consumers far-reaching data privacy rights?
CCPA
The California Consumer Privacy Act (CCPA), which is similar to the European Union's General Data Protection Regulation (GDPR), is meant to address consumer data privacy rights for California residents. It is important to note this law does not limit itself to companies that are headquartered in California. Rather it applies to any company that does business in the state of California.
In a MURTEC University session, Odia Kagan, Partner, Chair of GDPR Compliance and International Privacy, Fox Rothschild LLP, will unravel the complexities surrounding impending privacy legislation from CCPA to GDPR and beyond. It’s a not-to-be missed session for anyone doing business in the Golden State.
Kagan, who has three law degrees, has advised more than 90 companies of varying industries and sizes on GDPR compliance and uses insights and lessons learned from this to assist clients on their path to compliance with the CCPA. With an emphasis on pragmatic, risk-based approach, Kagan utilizes combines her in-depth knowledge of privacy and data security regulations and best practices with a keen understanding of emerging and information technologies, to provide clients with practical advice on how to design and implement their products and services, consummate their M&A transactions and engage third-party vendors in the United States and abroad.
Under the CCPA, any business that collects personal information, which in many cases is defined in terms much broader than the terms used by GDPR, must adhere to CCPA guidelines. The scope of personal information covers anything that can be associated with an individual from financial, medical information to internet activity, IP addresses and even inferences that are drawn from the data. Anything that can be associated with or identifies an individual could be covered.
Additionally, the CCPA defines "sale" as any transfer to a third party for consideration. This includes the transfer of information between brands operating under the same parent company. Knowing how consumer data is transferred within your organization will become very important with this law.
Register now for MURTEC and don’t miss Kagan’s session on Monday, March 9.
MURTEC is March 9-11, 2020 at the Paris in Las Vegas.