The amendment makes the privacy laws outlined within the CCPA more likely to be enforced. For one, it calls for the creation of a California Privacy Protection Agency that’s dedicated to defending consumer rights. Instead of enforcement falling under the purview of California’s attorney general’s office, the agency will take on the role and receive a $10 million annual budget.

The CPRA also expands the definition of Californians’ “sensitive personal information” that must be protected to include race, ethnicity and precise geolocation, and it enhances children’s privacy by tripling fines for violation. The amendment also places limits on data retention, requires annual audits and changes the “do not sell” personal information remit to “do not sell or share.”

The outcome for marketers? Given the additional details included in the amendment and the formation of an agency, companies that have been slow to adjust to the new rules should no longer avoid compliance. However, the new rules do not require those businesses that have begun making the necessary changes to dramatically change course or start over from scratch.

For more on the implications of the CCPA, read on in AdExchanger.

The post What the Consumer Privacy Rights Act Means for Marketers appeared first on Chief Marketer.

The new regulations eliminate the voluntary opt-out button design that version two had introduced, according to an analysis by AdExchanger. The button was a suggestion that addressed the need for marketers to communicate to consumers that they have the right to opt out of the sale of their personal information. No new solution was presented in the update, however.

The regulations also emphasized that businesses collecting personal information online must honor global privacy controls. And in terms of IP addresses, the AG issued a reversal of what it previously stated. Draft two said that visitors’ IP addresses are only considered “personal information” when directly links to a particular consumer or household. But in the third draft, that language has been removed. Read on for what’s likely to happen next in AdExchanger’s deep dive.

Other articles you might enjoy:

• Second Draft of CCPA Regulations Some Clarification on Compliance
• Insights for Marketers on CCPA Compliance
• GDPR: Three Tips for Compliance

The post Third Draft of CCPA Regulations Indicates Changes to Privacy Legislation appeared first on Chief Marketer.

The modified regulations offer some clarification for business that must comply with the legislation or be penalized. (Check out five overall CCPA takeaways for marketers, here). For instance, there was some initial confusion as to what constitutes the sharing of consumers’ “personal information.” The second draft reveals that businesses that collect IP addresses of visitors to its website are not in violation of the legislation if that IP address is not linked to a particular consumer or household.

The legislation also now includes what a voluntary opt-out button might look like. If used, it needs be around the same size of the company’s other buttons on their websites. However, since an opt-out provided through a link is sufficient, the button is optional and therefore may not necessarily be implemented by businesses.

Additional clarifications relate to global user-enabled privacy controls, like browser plug-ins or privacy settings, which need to be honored by businesses—but companies are allowed to alert consumers of such a conflict. And, apps that collect mobile data that consumers would “not reasonably expect” it to collect will need to provide an overview of the data that they’re collecting.

Read on in AdExchanger for additional regulations outlined in the second draft, including how service providers are allowed to treat personal data and how businesses must handle data that was collected before the CCPA went into effect.

Other articles you might enjoy:

• Consumer Privacy: Five Things Marketers Need to Know About CCPA
• Insights for Marketers on CCPA Compliance
• GDPR: Three Tips for Compliance

The post Second Draft of CCPA Regulations Offers Some Clarification on Compliance appeared first on Chief Marketer.

A recent piece from sister publication Event Marketer looks at four additional insights to consider gleaned from a conversation with a privacy manager from Microsoft. With the legislation’s reach extending far beyond California, it’s critical for marketers to determine what compliance looks like for organizations affected. The act’s purpose is to secure privacy rights for California residents involving data collection and sharing personal information. But that can include those businesses that host California residents at an event (even out-of-state) or on its website.

Read more in Event Marketer about which companies are subject to the CCPA, in terms of revenue, size and function; which other states might follow suit; what could constitute a “sale” of personal data; and how third parties might come into play.

Other articles you might enjoy:

• CCPA Update: It’s the Final Countdown
• GDPR: Three Tips for Compliance
• CCPA: Consider It a Blessing, Not a Burden

The post Insights for Marketers on CCPA Compliance appeared first on Chief Marketer.