Employer must prohibit employees from using customer data on private communication devices
An interesting ruling that could affect startups in particular, which often work with "bring your own device" policies, was just...
Read moreDetailsBusiness with customers in California? Attention CCPA
Who is it relevant to?
On January 1, 2020, the California Consumer Privacy Act (CCPA) will enter into force in California, which is intended to raise the data protection standard in line with the GDPR/GDPR, but also sets special requirements for online companies.
Key Facts
- The California Consumer Privacy Act (CCPA) comes into force on January 1, 2020.
- CCPA has special requirements for online companies and raises the data protection standard.
- CCPA and GDPR are partially incompatible with different requirements and definitions.
- The CCPA applies to annual gross revenues of at least 25 million US dollars.
- Companies that generate 50% or more of their revenue from the sale of personal data are subject to CCPA.
- CCPA also affects the processing of 50,000 or more consumers in California.
- Penalties for willful data protection violations are up to 7,500 US dollars per violation.
Does both apply?
However, both pieces of legislation are only partially compatible. For example, CCPA and the GDPR have different requirements, different definitions and different areas of application, e.g. when collecting personal data without explicit consent, and the GDPR lacks a right to opt-out, which is what the CCPA requires. CCPA also applies only to certain types of companies.
The CCPA currently applies if:
- The annual gross revenue amounts to at least 25 million US dollars.
- The company’s profit is 50 percent or more due to the annual revenue from the sale of personal data.
- The scope of processing of personal data for business purposes affects at least 50,000 or more consumers, devices or households living in California.
What are the penalties?
A possible penalty under the CCPA in the case of an intentional data breach amounts to USD 7,500 per breach, and USD 2,500 per breach in the event of negligent action.
Author: Marian Härtel
Marian Härtel ist Rechtsanwalt und Fachanwalt für IT-Recht mit einer über 25-jährigen Erfahrung als Unternehmer und Berater in den Bereichen Games, E-Sport, Blockchain, SaaS und Künstliche Intelligenz. Seine Beratungsschwerpunkte umfassen neben dem IT-Recht insbesondere das Urheberrecht, Medienrecht sowie Wettbewerbsrecht. Er betreut schwerpunktmäßig Start-ups, Agenturen und Influencer, die er in strategischen Fragen, komplexen Vertragsangelegenheiten sowie bei Investitionsprojekten begleitet. Dabei zeichnet sich seine Beratung durch einen interdisziplinären Ansatz aus, der juristische Expertise und langjährige unternehmerische Erfahrung miteinander verbindet. Ziel seiner Tätigkeit ist stets, Mandanten praxisorientierte Lösungen anzubieten und rechtlich fundierte Unterstützung bei der Umsetzung innovativer Geschäftsmodelle zu gewährleisten.
Weitere spannende Blogposts
Classification of opinion as an insult violates freedom of expression!
In principle, the question of whether a statement should be punished as an insult or protected by freedom of expression...
Read moreDetailsTelephone number in revocation instruction
The Schleswig-Holstein Higher Regional Court has strengthened the rights of consumers in a decision issued. The defendant distributes telecommunications services,...
Read moreDetailsAre Esport Players Contracts ToS?
Few people know The vast majority of people, let's say the "non-legally educated" people will probably associate the abbreviation GTC...
Read moreDetailsAI & Copyright: An Analysis
AI & copyright is a new and important topic that worries many people. It is important to understand this issue...
Read moreDetailsAttempt of cybergrooming to become punishable by law
Cybergrooming is the targeted response of children on the Internet with the aim of initiating sexual contacts. Cybergrooming is punishable...
Read moreDetailsAttention to misuse of VAT ID
Traders on Ebay should be careful that non-German traders misuse their own VAT ID. The reason for this behavior are...
Read moreDetailsRegulation of DLT – a brief overview
Regulation of DLT (distributed ledger technology) is a hot topic in the crypto world. Many executives and decision makers are...
Read moreDetailsSlicing the Pie Agreements at Startups
There is currently a start-up trend in Germany that has evolved from the need for collaborative development of software and/or...
Read moreDetails
Deepfakes im Influencer-Marketing: Rechtliche Grenzen, vertragliche Absicherung und strategische Einsatzfelder
Deepfakes sind längst kein theoretisches Phänomen mehr, sondern fester Bestandteil eines globalen Marktes für digitale Identität und monetarisierbaren Content. Die...
Read moreDetails
Podcastfolge
Leben als IT-Anwalt, Work-Life Balance, Familie und meine Karriere
In dieser fesselnden Episode meines IT-Medialaw Podcasts teile ich, Marian Härtel, meine persönliche Reise als leidenschaftlicher IT-Rechtsanwalt. Ich erzähle von...
Read moreDetails
Video
Mein transparente Abrechnung
In diesem Video rede ich ein wenig über transparente Abrechnung und wie ich kommuniziere, was es kostet, wenn man mit...
Read moreDetails
