'Honoring' CCPA's Binding Principles Nationally Won't Be Easy

'Honoring' CCPA's Binding Principles Nationally Won't Be Easy
Even companies with the reach, capital, and innovative capacity of Microsoft or Google will struggle to adhere to the tenets of California's new consumer privacy law.

In November, Microsoft published a blog post announcing the company's intention to "honor" the binding principles of the California Consumer Privacy Act, known as CCPA, across the US. When CCPA goes into effect in the state of California on January 1, 2020, Microsoft has committed to extending its compliance to the regulation across all US states.


CCPA is regarded by data privacy advocates as one of the most sweeping data privacy regulations in the US to date. CCPA is somewhat similar to the General Data Protection Regulation (GDPR), the data privacy law in the European Union, in that companies are required to disclose to their users what personal data of theirs is being collected, whether it is sold, and to whom. It also allows users to opt out of any sale of their data. Users must also have access to their data and be able to request that a company delete it — better known as the "right to be forgotten."


PR Stunt or Cybersecurity Leadership?As a professor, cybersecurity researcher, and entrepreneur, I am glad to see a company the size of Microsoft acknowledge that consumer data privacy should be a greater priority in the tech industry. We have seen time and time again how companies abuse their access to customer data and fail to provide proper protection around it. (Facebook is a prime example.) It's worth noting that other large tech firms such as Apple are also speaking out and providing leadership regarding data privacy. Even Go ..

Support the originator by clicking the read the rest link below.