Companies are confused about how to achieve compliance not only with the General Data Protection (GPS), but also with Californias Consumer Privacy Act (CCPA) More than 500,000 American businesses will be subject to the CCPA when it goes into effect on Jan. 1, 2020. Companies will be required to allow consumers to review the data they have collected on them, demand deletion of data and opt out of having the data sold to third parties. New York’s department of financial services similarly updated its cybersecurity guidance under NYCRR 500 Law.”]
Source: https://securityintelligence.com/understanding-californias-consumer-privacy-act-the-american-gdpr/