Tuesday, December 31, 2019

The CCPA goes into effect New Years Day


Aaron Mak has a rather sensational story on Slate, “The big change coming to just about every website on New Year’s Day: Thanks, California”.I had linked to Ian Corzine’s video on this with a Dec. 4 post.
  
Well, it’s probably overhyped to say every website.  It’s those that earn more than $25 million gross, collect data for more than 50000 people, or earn more than 50% of their revenue from selling data they collect. This appears to be an annual threshold (not all time, which would seem to be unenforceable it it were.)


The article maintains that US businesses may spend up to $55 billion to comply.

Sara Morrison of Vox Recode has an article Dec. 30 that explains  the law from the viewpoint of the consumer.  Vox doesn't require login to view articles and doesn't have a paywall, so I would wonder where their exposure comes from (they have a detailed privacy policy), presumably mostly from large scale sponsoring advertisers. (My browser sometimes tells me that it is waiting on "outbrain", which could be a clue.) 
   
Vice (Alex Bode, Jan. 2) suggests that enforcement won't start until summer 2020. 
      
Corzine had said that you have to be concerned if you collect, even through hidden cookies, more than 137 items of personal info a day in a year, but the law (when read) seems to refer to number of households or persons unduplicated.
  
I wrote an “official post” on my notes blog about the issue today, link.  
  
YouTube channels are apparently regarded as “sites” in the law (in a manner similar to COPPA). But YouTube would normally supply visitors with the necessary option buttons.   
  
As pf now, Blogger has not yet said anything new on the work platforms for users, as it had done for the similar EU GDPR.
  
Some commentators say this legislation was mostly inspired by Facebook’s Cambridge Analytica scandal, but it is fairly easy for a company the size of Facebook to comply technically now.
    
YouTube channels and particularly hosted websites that have individual corporate advertisers as sponsors will have to be careful how they comply if the advertisers provide them material.  
Websites should be careful with third party widgets that generate dynamic url’s on their own domains.  I will investigate this problem with services often used (like PR Newswire).  I suspect there are programmers (some of whom I probably know) who have thought of this. A lot of them may be making big $$$ this winter between COPPA and CCPA solving all these problems and connecting the dots.  Good for college tech major kids on gap years. 

No comments: