Are Your Vendors CCPA-Ready?

Effective January 1, the California Consumer Privacy Act (CCPA) secures new rights for California consumers. If your organization does any meaningful business in California, you’re probably on the hook regardless of where you’re headquartered. Certain types of personal information collected by financial institutions in accordance with the Gramm-Leach-Bliley Act (GLBA) are exempt from CCPA, but other data points not governed by GLBA are still subject to CCPA. Experts expect other states to introduce similar legislation — so even if you don’t do business in California,CCPA should be on the radar for you — and your vendors.