The California Consumer Privacy Act contains a provision for joint controllers, and under the upcoming law, a business is akin to a controller covered by the EU General Data Protection Regulation. The extent to which a joint controller exists within the CCPA will depend on an entity’s status as a business and its relationship to other businesses; however, an official approach will have to be determined by guidance outlines by the California attorney general. Santa Clara University School of Law's Linnea Doan and Marin Gamboa put the joint controller provision under the microscope in this piece for The Privacy Advisor.
Full Story