CCPA Exception Approved by California Legislature

Print Friendly, PDF & Email

September 25, 2019

CCPA Exception Approved

As we have previously blogged, the California Consumer Protection Act (“CCPA“) will impose significant new obligations on how businesses handle California State residents’ personal information.  Although the CCPA is scheduled to go into effect on January 1, 2020, California lawmakers are still working on amendments, implementing regulations, and clarifying CCPA exceptions. Shortly before the close of the California legislative session on September 13, 2019, several amendments were passed and sent to the Governor for signature.  One of the amendments being considered by the Governor, AB 874, would modify the definition of personal information by expanding the CCPA exception for publicly available information.

How Does AB 874 Amend the CCPA?

Current Definition of Personal Information

As currently written, the CCPA defines personal information to mean information that “identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.”

There is a carve-out for publicly available information, which is not considered personal information for purposes of the CCPA. Publicly available information is defined to mean information that is lawfully made available from federal, state, or local government records. At present, there are three provisions that limit the scope of publicly available information. Data is not considered publicly available information under the CCPA if it:

  • is biometric information collected by a business without a consumer’s knowledge;
  • is deidentified or aggregate consumer information; or
  • “is used for a purpose that is not compatible with the purpose for which the data is maintained and made available in the government records or for which it is publicly maintained.“

The Proposed CCPA Exception Amendment

If enacted, AB 874 would amend Section 1791.140(o)(2) of the California Civil Code to remove the provision relating to whether the data is used for a purpose that was “not compatible” with the purpose for which it was made available by the government. It would also remove the provision relating to deidentified or aggregate consumer information. In so doing, deidentified or aggregate consumer information would not constitute personal information, period. By removing these two provisions from the current version of the CCPA, the amendment would leave only one limitation on the scope of publicly available information: consumer biometric data collected by a business without the consumer’s knowledge. For the many businesses that rely on public records, this proposed CCPA exception amendment could significantly reduce their CCPA compliance burden.

In addition, the bill makes one minor change to the definition of personal information, which now means information that “is reasonably capable of being associated” with a particular consumer or household, as opposed to “capable” of being associated.

In sum, the bill would narrow the definition of “personal information” by expanding the scope of the “publicly available information” exemption so that any information that is lawfully made available from governmental records would be considered “publicly available” and not “personal information,” regardless of how that information is used.

CCPA compliance will be vital for most businesses.  Even though the law will go into effect on January 1, 2020, CCPA exceptions and amendments (including AB 874) are still being considered.  In addition, businesses are waiting on additional guidance from the California Attorney General, which should be released sometime this fall. Given the breadth of what CCPA compliance entails, it is important for businesses to be prepared. If you need assistance in complying with the CCPA, please e-mail us at, or call us at (212) 246-0900.

The material contained herein is provided for informational purposes only and is not legal advice, nor is it a substitute for obtaining legal advice from an attorney. Each situation is unique, and you should not act or rely on any information contained herein without seeking the advice of an experienced attorney.

Attorney Advertising

Similar Blog Posts:

CCPA Compliance: Service Provider Agreements and the California Consumer Privacy Act (CCPA)

Privacy Policies and the California Consumer Privacy Act (CCPA)

Comparing the California Consumer Privacy Act (CCPA) and the EU’s General Data Protection Regulation (GDPR)

David O. Klein

David O. Klein

David Klein is one of the most recognized attorneys in the telemarketing, technology, Internet marketing, sweepstakes and telecommunications fields. Skilled at counseling clients on a broad range of technology-related matters, David Klein has substantial experience in negotiating and drafting complex licensing, marketing and Internet agreements.

Schedule a Call
In The Know

Trending Topics

Creating a Viral and Legally Compliant "Pin to Win" Contest- Klein Moynihan Turco

Creating a Viral (And Legally Compliant) “Pin to Win” Contest

Print Friendly, PDF & Email

We have frequently written about the marketing benefits associated with the use of promotional contests and sweepstakes.  Promotional contests and sweepstakes often appear on social media platforms, which provide companies with a free and effective means to increase the number of consumers participating in their respective contests. While companies must

Facebook Decision defines a TCPA Autodialer- Klein Moynihan Turco LLP

Facebook Aftermath: Courts Clarify Definition of TCPA Autodialer

Print Friendly, PDF & Email

On April 1st, the U.S. Supreme Court released its opinion in Facebook, Inc. v. Duguid, marking a newly clarified definition of “autodialer” within the meaning of the Telephone Consumer Protection Act (“TCPA”). In the two weeks that followed, two federal courts have directly addressed the definition of TCPA autodialer as

Critical Role that TCPA Plays in Outbound Telemarketing- KMT

The Critical Role that the TCPA Plays in Outbound Telemarketing

Print Friendly, PDF & Email

If you’re running any sort of outbound telemarketing campaign – phone calls, voicemail drops, or text messaging – you need to understand the Telephone Consumer Protection Act (TCPA) and its enabling regulations. Call center operators are not the only businesses that employ outbound telemarketing to reach out to consumers. Using

How to Use Promotional Marketing the Legal Way: Klein Moynihan Turco LLP

How To Use Promotional Marketing The Legal Way

Print Friendly, PDF & Email

The use of promotional contests, games and sweepstakes marketing can be a dynamic and cost-effective way to increase sales, build a database of interested consumers and otherwise increase brand awareness and buzz. Consumers are more easily attracted to your marketing message by the opportunity to win prizes than with more

Share on facebook
Share on google
Share on twitter
Share on linkedin