The California Consumer Privacy Act (CCPA) went into effect on January 1. The law allows for fines against companies that violate the law and allows consumers to sue companies. CISOs must be prepared for compliance related requests from business customers and end users. Many CISOs already have a good understanding of what data they keep, where it’s located, and how it’s protected. There are a number of proposed amendments that are working their way through the California legislature, says Jon Hyland, a partner with Munsch Hardt.”]

