7 articles tagged "CCPA"

Channin Gladden Channin Gladden November 9, 2020
crpa

CPRA (Prop 24), Data Compliance, and Data Security: Here’s What you Need to Know.

Last week, California voters passed Proposition 24, the California Privacy Rights and Enforcement Act (CPRA). The CPRA expands the existing online consumer privacy protections of the California Consumer Privacy Act (CCPA) that went into effect this year and clarifies some of its ambiguities.

Channin Gladden Channin Gladden May 14, 2020
CCPA CPRA Compliance
CCPA 2.0

CCPA 2.0 - Here’s What You Need to Know | Very Good Security

Dubbed “CCPA 2.0,” a proposed initiative called the California Privacy Rights Act (CPRA) is gaining traction – and will likely make an appearance on the November 2020 ballot in California.

The original legislation, the California Consumer Privacy Act (CCPA), only came into effect on January 1, 2020, but we are already seeing potential changes to this data privacy regulation looming on the horizon. If passed, these proposed changes like CPRA could mean businesses will need to further beef up their data security measures.

Channin Gladden Channin Gladden January 30, 2020
CCPA am I selling data

Am I selling data? Why you may need CCPA compliance and not know it | Very Good Security

Think your business doesn’t need to worry about the California Consumer Privacy Act (CCPA) because you don’t sell any data for business purposes?

You may want to take a second look.

Under the broad definition of “sale” used in CCPA, you could very possibly be subject to CCPA requirements and unknowingly failing to achieve and maintain compliance. With the financial penalties associated with non-compliance, not to mention the data security risk that results from ignoring CCPA requirements, it’s absolutely vital to make sure that you know whether or not your business activities would be considered to be “selling data” under the CCPA.

Ena Kadribasic Ena Kadribasic November 6, 2019
PCI CCPA Datasecurity
compliance-vgs

Data Compliance: How Modern Businesses Can/Should Approach Data Security | Very Good Security

These days, it seems that companies are having to navigate increasingly complex data compliance regulations. From following PCI DSS rules to maintaining HIPAA, GDPR, and CCPA compliance, the complicated web of global regulatory frameworks for data protection just keeps getting more and more tangled.

Ena Kadribasic Ena Kadribasic September 18, 2019
GDPR CCPA Compliance
vgs-cppa-vs-gdpr-hero-3

GDPR vs CCPA Compliance, All in One Place

In our last blog post about CCPA, we went into the details of California’s comprehensive privacy law, more formally known as the California Consumer Privacy Act. Coming into effect January 1, 2020, the new privacy law pertain to companies that collect data from California residents, regardless of the location of the company - both within the United States and globally.

Ena Kadribasic Ena Kadribasic September 12, 2019
ссpa-guide-vgs

California Consumer Privacy Act (CCPA): What You Need to Know | Very Good Security

What is the California Consumer Privacy Act (CCPA)?

The California Consumer Privacy Act (CCPA) is a comprehensive data privacy law that will go into effect on January 1, 2020. The new consumer information security framework will have a major impact on both consumers and businesses because the regulations apply to any companies – no matter their location – that collect personal information and other consumer data from residents of California. This includes handling names, addresses, social security numbers, credit card numbers, IP addresses, and more.

gordon-young Gordon Young May 8, 2019
Сompliance Academy

Introducing Compliance Academy — A resource to learn about PCI, SOC2, GDPR & CCPA

Today, we’re happy to announce the introduction of our new Compliance Academy, a resource where you can learn all about compliances and regulations such as PCI, SOC2, GDPR and CCPA.

In the last 2 years at VGS we’ve seen a significant uptick in interest regarding regulation. Every day we field multiple questions from people trying to understand if their company is “in scope” and if so, what they need to do about it. There are a number of reasons for this interest but primarily it appears to be driven by uncertainty. Both startups and established companies alike face the prospect of a world with increased regulation and significantly stiffer penalties for failure to comply.