--- title: New California Data Law description: California is added a new data privacy law in January 2020 that could end up being adopted nationwide. Learn more about cyber law here. image: https://blog.goosmannlaw.com/hubfs/46144244_s.jpg --- [![Goosman Lawfirm](https://blog.goosmannlaw.com/hs-fs/hubfs/Goosmannlaw%20October2017/images/Goosmann_Law_Firm_logo_4C-white.png?width=1250&name=Goosmann_Law_Firm_logo_4C-white.png "Goosman Lawfirm")](http://goosmannlaw.com/) - [COVID-19 Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/) - Our Team - [Attorneys](https://goosmannlaw.com/attorneys/) - [Non-Attorney Staff](https://http://goosmannlaw.com/non-attorney-staff/) - Practices & Industries - [Practices](https://goosmannlaw.com/practices/) - [Banking & Finance](https://goosmannlaw.com/banking-finance/) - [Bankruptcy, Restructuring & Workouts](https://goosmannlaw.com/bankruptcy-restructuring-workouts/) - [Business](https://goosmannlaw.com/business/) - [Divorce & Family Law](https://goosmannlaw.com/divorce-family-law/) - [Employment](https://goosmannlaw.com/employment-law/) - [Environmental, Health & Safety](https://goosmannlaw.com/health-safety/) - [Estate Planning](https://trustlawcounsel.com) - [Gestational Surrogacy & Adoption](https://goosmannlaw.com/gestational-surrogacy-adoption/) - [International Law](http://goosmannlaw.com/international-law/) - [Litigation / Trial Law](https://goosmannlaw.com/litigation-trial-law/) - [Local Counsel](https://http://goosmannlaw.com/local-counsel/) - [Mergers & Acquisitions](https://goosmannlaw.com/mergers-acquisitions/) - [Rapid Response](https://goosmannlaw.com/rapid-response/) - [Industries](https://goosmannlaw.com/industries/) - [Agribusiness & Cooperatives](https://goosmannlaw.com/agribusiness-cooperatives/) - [Construction](https://goosmannlaw.com/construction/) - [Cyber Law and Telecommunications](https://goosmannlaw.com/cyber-law/) - [Education](https://goosmannlaw.com/education/) - [Health Care](https://goosmannlaw.com/health-care/) - [Manufacturing](https://goosmannlaw.com/manufacturing-law/) - [Multifamily Housing](https://goosmannlaw.com/multifamily-housing-law/) - [Non-Profit & Tax Exempt Organizations](https://goosmannlaw.com/non-profit-law/) - [Real Estate](https://goosmannlaw.com/real-estate/) - [Transportation](https://goosmannlaw.com/transportation/) - [Tribal](https://goosmannlaw.com/tribal/) - Our Firm - [Firm News](https://blog.goosmannlaw.com/firm-news) - Careers - [Attorneys](https://goosmannlaw.com/careers/attorneys/) - [Administration](https://goosmannlaw.com/careers/administration/) - [Internships](https://goosmannlaw.com/careers/internships/) - [Client Testimonials and Results](https://goosmannlaw.com/our-firm/client-testimonials-and-results/) - [Culture, Diversity, and Community](https://http://goosmannlaw.com/our-firm/culture-diversity-and-community/) - [Women-Owned Business](https://goosmannlaw.com/our-firm/women-owned-business/) - [Associations & Memberships](https://goosmannlaw.com/associations-memberships/) - [Firm History](https://goosmannlaw.com/firm-history/) - Blogs - [CEO Law Review](https://blog.goosmannlaw.com/ceo-on-your-side) - [Construction Lawyer](https://blog.goosmannlaw.com/construction-lawyer-on-your-side) - [Cyber Lawyer](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side) - [Deal Maker](https://blog.goosmannlaw.com/deal-maker-on-your-side) - [Divorce Docket](https://blog.goosmannlaw.com/divorce-lawyer-on-your-side) - [Food for Thought](https://blog.goosmannlaw.com/agricultural-lawyer-on-your-side) - [HR Legal Insider](https://blog.goosmannlaw.com/human-resources-on-your-side) - [Law Doc](https://blog.goosmannlaw.com/health-lawyer-on-your-side) - [Paralegal Review](https://blog.goosmannlaw.com/paralegal-review/) - [Real Estate Lawyer](https://blog.goosmannlaw.com/real-estate-lawyer-on-your-side) - [Risky Business](https://blog.goosmannlaw.com/risk-manager-on-your-side) - [The Banker’s Suit](https://blog.goosmannlaw.com/banking-lawyer-on-you-side) - [Trial Law Review](https://blog.goosmannlaw.com/trial-lawyer-on-you-side) - [Trust Law Counsel](https://blog.goosmannlaw.com/estate-planning-laywer-on-your-side) - Resources - [COVID-19 Resource Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/) - [Podcast](http://podcast.goosmannlaw.com/) - [Videos](https://goosmannlaw.com/videos/) - [FREE eBooks & Tools](https://goosmannlaw.com/free-ebooks-tools/) - Contact Us - [Office Locations](https://goosmannlaw.com/locations/) - [Sioux City Law Firm](https://goosmannlaw.com/locations/sioux-city-law-firm/) - [Sioux Falls Law Firm](https://goosmannlaw.com/locations/sioux-falls-law-firm/) - [Omaha Law Firm](https://goosmannlaw.com/locations/omaha-law-firm/) - [Spirit Lake & Spencer Law Firms](https://goosmannlaw.com/locations/spirit-lake-and-spencer-law-firm/) - [Real Estate Closings Office](https://goosmannlaw.com/locations/real-estate-closing-office/) - [Submit a Testimonial](https://goosmannlaw.com/submit-a-testimonial/) - [Sign Up for Our Newsletter](https://goosmannlaw.com/sign-up-for-our-newsletter/) - [Pay Online](https://goosmannlaw.com/pay-online-3/) - [  (855) 843-4531](tel:855-843-4531) ![](https://blog.goosmannlaw.com/hubfs/Blog_Images/Lockbox%20Lawyer/close-button.png) [tel:855-THE-GLF1](tel:855-THE-GLF1) [Cyber Law](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law) [Cyber Law Trends](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law-trends) # [New California Data Law](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/new-california-data-law) By [Goosmann Law Team](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/author/goosmann-law-team)   |  30, July 2018 [READ NOW](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/new-california-data-law) [Read Post](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/new-california-data-law#article) [![](https://blog.goosmannlaw.com/hs-fs/hubfs/Logos/Logo1.jpg?width=60&name=Logo1.jpg)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/author/goosmann-law-team) [Goosmann Law Team](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/author/goosmann-law-team)  Tags: [Cyber Law](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law) [Cyber Law Trends](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law-trends) ## ![46144244_s](https://blog.goosmannlaw.com/hs-fs/hubfs/46144244_s.jpg?width=799&name=46144244_s.jpg) ## California has been a trendsetter for data privacy legislation in the United States for years now, and its most recent data privacy law is once again the first of its kind. The California Consumer Privacy Act of 2018, or AB 375, provides new consumer rights over commercial data collection and use and will go into force in January, 2020. There are obvious parallels with rights contained in the E.U.’s General Data Protection Regulation (“GDPR”), and while AB 375 is not as comprehensive, its definition of personal information is much broader. The law applies to businesses that collect and process the personal information of consumers and (1) have an annual gross revenue of over $25 million dollars, (2) buy, sell, receive, or share the personal information of 50,000 or more individuals, households, or devices; or (3) collects 50% or more of its annual revenue from selling consumer information.  Important provisions include: - **Collection and Sale Disclosures to Consumers:** On request, a business must disclose what personal data they collect, the source of the data, why the data was collected, and what specific data the company holds about the consumer. They must also disclose what personal data they share or sell and the categories of third parties they share or sell that data to. The description of third parties by category was a change from the original text, which would have required specific identification. - **Opt-Out and Sale Restrictions:** Businesses that sell consumer data have to allow consumers an option to opt-out of sale, which will prevent the company from selling the consumer’s personal data. This option needs to be provided through a prominent link on the company’s webpage, in its privacy policy, and in any California specific description of consumer rights.  Third parties also may not sell personal data they purchased unless they give notice and allow the consumers to opt-out. Finally, there are also sale restrictions for any personal data collected from children under 16. - **Deletion, Access, and Transfer Requests:** On request, companies have to delete any personal information they hold about that consumer and direct any of their service providers to do the same unless a particular exception applies. They may also be required to provide the data they’ve collected directly to the individual in a usable form, allowing the consumer to transfer that data to other entities. - **Non-Discrimination:** Companies have to provide equal service to all consumers regardless of whether they exercise any of these rights, and there cannot be any denial or degradation of service or other discriminatory treatment. While companies can offer financial incentives like a lower rate or discount to consumers that allow collection or sale of their data, the amount must be directly related to the data’s value. - **Enforcement and Penalties:** The law will be enforced by the California Attorney General and penalties can cost up to $7,500 dollars per violation. - **Private Right of Action for Data Breach:** Some States allow a private right of action if a business violates a breach notification statute, but do not address liability for the actual breach. AB 375 changes this and allows affected individuals to sue if a data breach compromises their personal information and the company holding that data failed to take reasonable measures to protect it. The amounts can be between $100 and $750 per consumer per incident, which could quickly add up in a mass breach, or actual damages, which are usually quite difficult to prove. The California legislature, Attorney General’s office, and industry players have a year and a half to consider amendments and enforcement.  Although AB 375 is under intense scrutiny and is quite unpopular among larger tech, marketing, and data analytics firms, it was proposed and passed with little actual opposition.  Many companies supported the bill in order to avoid an even more strict ballot initiative that could be presented directly to voters, which would have been far more difficult to amend.  This law was the lesser of two evils for many tech firms, and the lack of opposition suggests many firms considered these changes inevitabile due to widespread consumer frustration and desire to have some control over the collection and use of personal data.  As with breach notification statutes that emerged over fifteen years ago, we can expect other States will start considering similar legislation, and these California consumer rights may very well become the new normal across the country. Businesses across the United States should keep a close eye on how this law develops and what results follow once it comes into force. Visit our [Cyber Law blog](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side) for more interesting updates on how the law is developing with the change and growth of technology. Have any questions or comments? Contact our Sioux City, Sioux Falls, or Omaha office today! ### Select Different CTA for each Post from Blog Editor [![New Call-to-action](https://no-cache.hubspot.com/cta/default/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422.png)](https://cta-redirect.hubspot.com/cta/redirect/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422) ### Subscribe Our Blog Thanks for submission!! - Recent - Popular ### Posts by Topic - [Cyber Law (43)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law) - [cyber (7)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber) - [cybersecurity (5)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cybersecurity) - [Business News and Insights (4)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/business-news-and-insights) - [Cyber Law Trends (3)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law-trends) - [Firm News (3)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/firm-news) - [Media Law and Technology & Science (3)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/media-law-and-technology-science) - [CEO (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/ceo) - [Communications Law (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/communications-law) - [Cyber scams (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-scams) - [EMV Credit Cards (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/emv-credit-cards) - [HR Legal Insider (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/hr-legal-insider) - [CFAA (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cfaa) - [Communications Decency Act (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/communications-decency-act) - [Cyber Legacy (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-legacy) - [DNA (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/dna) - [Employee Recruiting (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/employee-recruiting) - [Employment News and Insights (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/employment-news-and-insights) - [IRS (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/irs) - [IRS scam (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/irs-scam) - [IRS scam Sioux City (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/irs-scam-sioux-city) - [Identity Theft (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/identity-theft) - [Ransomware (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/ransomware) - [Sioux City IRS scam (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/sioux-city-irs-scam) - [South Dakota (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/south-dakota) - [data breach (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/data-breach) - [scam (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/scam) DISCLAIMER: The information in this blog post (“post”) is provided for general informational purposes only, and may not reflect the current law in your jurisdiction. By visiting this website, blog, or post you understand that there is no attorney client relationship between you and the Goosmann Law Firm attorneys and website publisher. No information contained in this post should be construed as legal advice from Goosmann Law Firm, PLC, or the individual author, nor is it intended to be a substitute for legal counsel on any subject matter. No reader of this post should act or refrain from acting on the basis of any information included in, or accessible through, this Post without seeking the appropriate legal or other professional advice on the particular facts and circumstances at issue from a lawyer licensed in the recipient’s state, country or other appropriate licensing jurisdiction. #### Let Us Know What You Thought about this Post. Put your Comment Below. [Previous Post](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/ancestry-privacy-and-your-dna-what-to-consider-before-you-disclose-your-genetic-information) ##### [Ancestry, Privacy, and Your DNA: What to Consider Before You Disclose Your Genetic Information](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/ancestry-privacy-and-your-dna-what-to-consider-before-you-disclose-your-genetic-information) [Next Post](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/the-true-value-of-a-penetration-test-legal-liabilities) ##### [The True Value of a Penetration Test: Legal Liabilities](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/the-true-value-of-a-penetration-test-legal-liabilities) ### Contact Info **Sioux City Location** P. 712-226-4000 F. (712) 224-4517 **Sioux Falls Location** P. (605) 371-2000 F. (605) 275-2039 **Omaha Location** P. (402) 280-7648 F. (402) 505-3967 --- [Disclaimer](http://goosmannlaw.com/list-all-blogs/disclaimer/) | [Privacy Policy](http://goosmannlaw.com/privacy-policy/) ### Locations **Sioux City Location** 410 5th Street Sioux City, IA 51101 **Sioux Falls Location** 5010 S. Minnesota Avenue, Suite 100 Sioux Falls, SD 57108 **Omaha Location** Advent Building 17838 Burke Street, Suite 250 Omaha, NE 68118 ![Goosmann](https://blog.goosmannlaw.com/hs-fs/hubfs/Blog_Images/Lockbox%20Lawyer/goosmann-white.png?width=250&name=goosmann-white.png "Goosmann") Goosmann Law Firm is a FULL SERVICE LAW FIRM with locations in Sioux City, Iowa, Sioux Falls, South Dakota, and Omaha, Nebraska. Goosmann Law attorneys are licensed to practice in Iowa, Nebraska, South Dakota, and North Dakota. Their attorney team's practices and industries include but are not limited to Agribusiness and Cooperatives, Banking and Finance, Bankruptcy, Restructuring and Workouts, Business, Construction, Cyber Law and Telecommunications, Divorce and Family Law, Education, Employment, Environmental Health and Safety, Gestational Surrogacy and Adoption, Health Care, Litigation and Trial Law, Manufacturing, Mergers and Acquisitions, Municipal, Nonprofit and Tax Exempt Organizations, Real Estate, and Transportation, Tribal, Wills, Trusts, Estate Planning, and Probate Law. Goosmann © Copyright 2017