{"id":5480,"date":"2020-01-09T17:54:29","date_gmt":"2020-01-09T12:24:29","guid":{"rendered":"https:\/\/triumphias.com\/blog\/?p=5480"},"modified":"2020-01-09T17:54:29","modified_gmt":"2020-01-09T12:24:29","slug":"californias-data-privacy-law","status":"publish","type":"post","link":"https:\/\/triumphias.com\/blog\/californias-data-privacy-law\/","title":{"rendered":"California\u2019s data privacy law:"},"content":{"rendered":"<p><strong>Relevance: G.S Mains Paper 3: Internal Security<br \/>\n<a href=\"https:\/\/triumphias.com\/blog\/wp-content\/uploads\/2020\/01\/California.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-large wp-image-5483\" src=\"https:\/\/triumphias.com\/blog\/wp-content\/uploads\/2020\/01\/California-1024x538.png\" alt=\"\" width=\"810\" height=\"426\" \/><\/a><br \/>\n<\/strong><\/p>\n<p><strong> Challenges to internal security through communication networks<\/strong><\/p>\n<p><strong>Context:<\/strong><\/p>\n<ul>\n<li>California\u2019s new privacy law, the California Consumer Privacy Act (CCPA), recently went into effect.<\/li>\n<\/ul>\n<p><strong>Aim:<\/strong><\/p>\n<ul>\n<li>The Act gives Californians new controls over how companies use their data.<br \/>\n\u2022 These controls include ;<br \/>\n\u2022 The right to access the data,<br \/>\n\u2022 The right to ask for its deletion,<br \/>\n\u2022 The right to prevent its sale to third parties,<br \/>\n\u2022 Significantly, because of the global nature of the Internet, these changes will affect users worldwide.<\/li>\n<\/ul>\n<p><a href=\"https:\/\/triumphias.com\/blog\/wp-content\/uploads\/2020\/01\/CAli.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-5481\" src=\"https:\/\/triumphias.com\/blog\/wp-content\/uploads\/2020\/01\/CAli.jpg\" alt=\"\" width=\"638\" height=\"479\" \/><\/a><\/p>\n<p><strong>Rights of the CCPA give Californian users:<\/strong><\/p>\n<ul>\n<li>The users will have the right to see what personal information businesses collect about them, and the purpose and process of the collection.<br \/>\n\u2022 [Personal information refers to any information that can be linked back to the user.]<br \/>\n\u2022 Users can request and view what inferences the businesses make about them.<br \/>\n\u2022 They also have the right to see details about their personal information being sold or given to a third party.<br \/>\n\u2022 Users can make businesses delete their personal information, and opt out of having their data sold to third parties.<br \/>\n\u2022 The law lays out some exceptions too.<br \/>\n\u2022 These include information necessary for completing transactions, providing a service, protecting consumer security, and protecting freedom of speech.<br \/>\n\u2022 Users can get a copy of the collected personal information for free.<br \/>\n\u2022 Parents have to give permission to companies before the companies can sell the data of their children under the age of 13 to third parties.<\/li>\n<\/ul>\n<p><strong>Which companies does the law apply to?<\/strong><\/p>\n<ul>\n<li>The law only applies to businesses with gross annual revenues of more than $25 million that buy, receive or sell the personal information of 50,000 or more consumers in California that derive more than half of their annual revenue from selling consumers\u2019 personal information.<br \/>\n\u2022 The law applies to businesses collecting information of Californians and not just to businesses that operate in the state.<\/li>\n<\/ul>\n<p><strong>What will the implications be?<br \/>\n\u2022 Unintentional noncompliance will lead to fines of $2,500 per violation.<br \/>\n\u2022 Intentional noncompliance will attract a penalty of $7,500 per violation.<br \/>\n\u2022 Some studies estimate it will cost businesses $55 billion to initially meet the standards.<br \/>\n\u2022 Of this, $16 billion is expected to be spent over the next decade.<br \/>\n\u2022 Reportedly, the law protects $12 billion worth of personal information that is used for advertising in California every year.<\/strong><\/p>\n<p><strong>What has changed in practical terms?<\/strong><\/p>\n<ul>\n<li>The law went into effect on January 1, 2020.<br \/>\n\u2022 The California Attorney General (AG) has not begun enforcing the act yet.<br \/>\n\u2022 The AG will be allowed to take action 6 months after the rules are finalised.<br \/>\n\u2022 At the very least, companies will need to set up web pages and phone numbers to take requests.<br \/>\n\u2022 Users also may begin to see a new button on websites stating \u201cDo Not Sell My Personal Information\u201d.<br \/>\n\u2022 Several large companies have set up new infrastructure to comply.<br \/>\n\u2022 Google launched a Chrome extension to block Google Analytics from collecting data.<br \/>\n\u2022 Facebook has said that the law does not apply to them since they do not \u201csell\u201d data, and that they already have features that comply with the law.<\/li>\n<\/ul>\n<p><strong>How does this affect non-Californians?<\/strong><\/p>\n<ul>\n<li>Primarily, even Indian companies that have customers in California would have to comply with the law.<br \/>\n\u2022 Many firms are finding it easier to make the legal changes for all users rather than trying to distinguish users from California.<br \/>\n\u2022 E.g. the European Union\u2019s General Data Protection Regulation (GDPR) too, shifted the entire Internet economy, not just that of the EU<\/li>\n<\/ul>\n<p><strong>What are the concerns?<br \/>\n\u2022 The Act gives users the right to stop the selling of their data, but not the collection of their data.<br \/>\n\u2022 So, this regulates the data broker system.<br \/>\n\u2022 However, it does not do much to affect companies like Facebook and Google that make most of their money by collecting the data, not by selling it.<br \/>\n\u2022 Advertisers pay Facebook to target ads to users based on that data; they do not pay Facebook for the data itself.<br \/>\n\u2022 Also, the Act seems to place the burden of navigating this complex economy on users.<br \/>\n\u2022 There are also concerns that many of the provisions are vaguely worded.<br \/>\n\u2022 E.g. the Act leaves concepts such as \u201cthird-party sharing\u201d or \u201cselling\u201d to interpretation<br \/>\n\u2022 Also, compliance challenges are expected to be greater with CCPA than with the GDPR.<\/strong><\/p>\n<p><strong>Way forward:<\/strong><\/p>\n<ul>\n<li>Several of the rights discussed above are also in India\u2019s Personal Data Protection Bill.<br \/>\n\u2022 These include the right to access a copy of one\u2019s data, and the right to deletion.<br \/>\n\u2022 India\u2019s bill goes further in some regards, including the right to correction.<br \/>\n\u2022 However, India\u2019s bill is more focused on users\u2019 rights over collections.<br \/>\n\u2022 On the other hand, California\u2019s act is focused more on the third-party sharing and selling of a user\u2019s data.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Relevance: G.S Mains Paper 3: Internal Security Challenges to internal security through communication networks Context: California\u2019s new privacy law, the<\/p>\n","protected":false},"author":1,"featured_media":4849,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[123,42,72],"tags":[392],"class_list":["post-5480","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-current-affairs","category-general-studies-iii-technology-economic-development-bio-diversity-environment-security-and-disaster-management","category-internal-security","tag-union-public-service-commission-upsc"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/posts\/5480","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/comments?post=5480"}],"version-history":[{"count":1,"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/posts\/5480\/revisions"}],"predecessor-version":[{"id":5484,"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/posts\/5480\/revisions\/5484"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/media\/4849"}],"wp:attachment":[{"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/media?parent=5480"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/categories?post=5480"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/triumphias.com\/blog\/wp-json\/wp\/v2\/tags?post=5480"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}