The California Consumer Privacy Act is notorious for the haste with which it was drafted. Many provisions of the statute require clarification, and the attorney general’s office is holding a series of public forums before issuing clarifying regulations. Among the concepts not well defined by the CCPA are deidentification, pseudonymization and aggregation. In this piece for Privacy Tracker, IAPP Westin Fellow Mitchell Noordyke, CIPP/E, CIPP/US, takes a look at some of the challenges the CCPA creates with its imprecise language regarding these topics and points out some of the limited benefits the CCPA offers a business for each type of data treatment technique. Editor's Note: The IAPP will host the CCPA Comprehensive, in Fremont, California, in February.
Full Story