California Privacy Protection Act: How Does It Impact My Agency

The California Privacy Protection Act (CCPA) is a privacy law that was passed in California in 2018 and became effective on January 1, 2020. The CCPA provides California residents with the right to know what personal information is being collected about them by businesses, and to request that their information be deleted. It also allows them to opt-out of the sale of their personal information to third parties.

Criminal justice agencies in California must comply with the CCPA when handling personal information of California residents. This includes personal information collected in the course of criminal investigations, court proceedings, and other criminal justice activities. Failure to comply with the CCPA can result in significant fines and legal action.

To remain compliant with the CCPA, criminal justice agencies must take the following steps:

  1. Conduct a thorough review of their data collection and storage practices to identify all personal information that is being collected, shared, and sold.
  2. Provide clear and concise notices to California residents about their data collection and sharing practices, including what types of personal information they collect and why they collect it.
  3. Allow California residents to exercise their rights under the CCPA, including the right to access and delete their personal information when appropriate, and the right to opt-out of the sale of their personal information.
  4. Implement reasonable security measures to protect personal information from unauthorized access or disclosure.
  5. Train employees on the CCPA and its requirements.

Criminal justice agencies may also need to work with their technology vendors and other third-party service providers to ensure that they are also in compliance with the CCPA.

In conclusion, the CCPA has significant implications for criminal justice agencies in California. It is essential that these agencies take steps to comply with the law and protect the personal information of California residents. This includes reviewing data collection and storage practices, providing clear notices to residents, allowing residents to exercise their rights under the CCPA, implementing reasonable security measures, and training employees on the law. By taking these steps, criminal justice agencies can help ensure that they are in compliance with the CCPA and protect the privacy of California residents.


CCPA for Law Enforcement: What you need to know (2019).