Search form

California Consumer Privacy Act

The California Consumer Privacy Act (CCPA) goes into effect January 1, 2020 – are you ready?


The California Consumer Privacy Act (CCPA) is one of the most significant pieces of privacy legislation in the U.S. Effective January 1, 2020, the law creates new privacy rights for consumers (broadly defined) and extensive obligations for covered businesses relating to the collection, processing, deletion, sale and security of personal information.

The new law will affect businesses in and outside of California. Business leaders need to be aware of the law, its amendments and regulatory guidance to avoid costly fines and litigation risk. 

Since the CCPA was enacted, a number of amendments have been proposed and passed. Additionally, guidance from the California Attorney General will substantially affect the CCPA’s application. Keep track of latest developments on our Privacy, Data and Cybersecurity blog

Our CCPA team works with clients on issues related to the privacy and security of consumer and employee personal information in two main areas: compliance and litigation. 


The CCPA builds on an already-complex matrix of privacy and security laws in California, other states, at the federal level and globally. To help businesses navigate the CCPA within this complex environment, Jackson Lewis P.C.’s Privacy, Data and Cybersecurity Practice Group assembled a team of data privacy and security compliance attorneys, many of whom are Certified Information Privacy Professionals (CIPP) with the International Association of Privacy Professionals. These attorneys regularly work with businesses to develop and implement practical strategies, policies and procedures for meeting their regulatory, contractual and ethical obligations concerning data privacy and security. 

More specifically, our CCPA Compliance Team assists clients in:

  • Performing initial CCPA assessments to evaluate applicability to the business, related entities and third parties;
  • Working through data-mapping processes to improve their understanding of the personal information they collect, process and sell and their ability to respond to consumer requests concerning personal information;
  • Operationalizing the law regarding prompt and timely responses to consumer inquiries about their personal information;
  • Preparing notices, website privacy statements, policies and procedures, training materials, third party service provider contract clauses and other documents required for compliance;
  • Conducting training for employees responsible for administrating consumer rights under the CCPA; and
  • Understanding and implementing best practices for ensuring they have “reasonable safeguards” for protecting personal information to avoid data breaches and responding to data incidents when they occur. 

Litigation and Class Action Defense

Jackson Lewis has long been at the forefront of defending organizations in single plaintiff and putative class actions, including those involving privacy issues such as the Illinois Biometric Information Privacy Act (BIPA) and the Telephone Consumer Protection Act (TCPA). Our CCPA Litigation and Class Action Defense Team combines substantial litigation experience and significant subject matter knowledge with thoughtful, strategic and creative approaches in providing clients with sensible strategies to defend difficult claims or lawsuits, including class actions. 

More specifically, our CCPA Litigation and Class Action Defense Team assists clients in: 

  • Evaluating the merits of underlying claim(s);
  • Assessing class issues and the likelihood of class certification, as applicable;
  • Estimating discovery issues and costs;
  • Preparing damages models and potential exposure analyses; 
  • Considering the effects of the litigation on the company’s operations, media issues and financial and competitive impact;
  • Developing defensive strategies; and
  • Defending suits in both federal and state court.

The Team

See All
Showing 1-8 of 14
Advanced Filtering
All A-Z
See All
Showing 1-8 of 14

See All Webinars


Watch Now

The Fault Line of Privacy Legislation: How the CCPA Changes Everything

October 8, 2019 - 2:30 PM to 3:30 PM EST

Credits: Continuing education credit was offered for the live broadcast of this seminar.
You cannot earn credit for watching the archived webinar.

Watch Now

See AllPublications

October 10, 2019

California Consumer Privacy Act FAQs for Covered Businesses

October 10, 2019

Set to take effect January 1, 2020, the California Consumer Privacy Act (CCPA), considered one of the most expansive U.S. privacy laws to date, places limitations on the collection and sale of a consumer’s personal information and provides consumers certain rights with respect to their personal information. Organizations should be... Read More

See AllIn the News

April 16, 2019
Data Insider

Joseph Lazzarotti Discusses the Potential for Severe Repercussions of SB 561 for Businesses Subject to CCPA

April 16, 2019

Joseph Lazzarotti discusses the potentially severe repercussion of SB 561, an amendment to the CCPA, which would broaden that scope and grant consumers a private right of action themselves if any of their rights are violated under CCPA in "Recapping Proposed Changes to the California Consumer Privacy Act,"... Read More

April 10, 2019
The Daily Swig

Joseph Lazzarotti Comments on the Uptick of Data Privacy Legislation for Businesses

April 10, 2019

Joseph Lazzarotti comments on the move towards mandatory regulation of the data practices for businesses aimed at changing the collection, use and share consumer data in "The race for right to privacy in the US," published by The Daily Swig.  Subscription may be required to view article Read More

March 4, 2019
Business Travel News

Joseph Lazzarotti Comments on Implications of New Privacy Rules for Businesses in California

March 4, 2019

Joseph Lazzarotti comments on the implications of a bill introduced to expand the California Consumer Privacy Act of 2018 in "California Data Privacy Laws Take Shape," in Business Travel News. Subscription may be required to view article Read More