Melchionna PLLC

Navigation

Recent Posts


  • The New U.S. Tariffs Regime Introduced on April 2, 2025. An Intro.
  • Artificial Intelligence and the legal profession
  • Melchionna PLLC and Grimaldi Alliance
  • How AI Works and AI Liability
  • Crypto Litigation: an update

Who we are – Practice Areas


  • About us
  • Alcohol Law
  • Art law
  • Business law
  • Fashion law
  • Finance and banking
  • Food law
  • International tax
  • International trade
  • Internet Law
  • M&A and corporate law
  • Money laundering
  • Tax Law
  • Technology law
  • Trademark law

Melchionna Copyright 2019

Hydra WordPress Theme by EckoThemes.

Published with WordPress.

Related Articles

Filter by Category

  • Business law(19)
  • M&A and corporate law(15)
  • Food law(13)
  • International trade(10)
  • Technology law(8)
  • International tax(8)
  • Internet Law(5)
  • Tax Law(5)
  • Alcohol Law(5)
  • About us(4)
  • Finance and banking(4)
  • Money laundering(3)
  • Art law(2)
  • Fashion law(1)
  • Trademark law(1)

Filter by Author

  • iulia@plus972group.com (17)
  • lcmm@melchionnalaw.com (56)
Back to Latest Articles
About us

Mission and Values

Mission Melchionna PLLC is an indipendent law firm. Melchionna PLLC’s mission is to provide outstanding legal services and tax advice. We focus on building a relationship with...

Posted on 5th November 2019 by lcmm@melchionnalaw.com

About us

People

Avv. Flavia Betti Tonini, PhD, Of Counsel Flavia Betti Tonini is an experienced attorney with a solid background in corporate law, compliance, criminal law, and...

Posted on 13th January 2023 by lcmm@melchionnalaw.com

About us

Melchionna PLLC, a law firm with a focus on business, corporate, tax, and IP law.

About us Melchionna PLLC represents and assists North American and European business clients in achieving their goals with sound legal advice and innovative solutions to current...

Posted on 18th February 2019 by lcmm@melchionnalaw.com

Business law

California’s new data privacy law

The California Consumer Privacy Act (CCPA) entered into effect on January 1, 2020, bringing with it a slew of new protectionary measures for consumer data. Below is a summary of...

Posted on 2nd January 2020 by lcmm@melchionnalaw.com

Business law

On November 21, new rules entered into effect on EB – 5 Immigrant Investor Program

The Immigrant Investors Program (EB-5) allows foreign investors to apply for permanent residence in the U.S. (green card) if they invest in a commercial enterprise and create or...

Posted on 30th December 2019 by lcmm@melchionnalaw.com

Food law

Pennsylvania: recent changes in serving alcoholic beverages

On November 21, 2019, Pennsylvania Governor Tom Wolf signed into law House Bill 947 (now known as Act 86 of 2019) in order to address the inconsistent alcoholic beverage serving...

Posted on 19th December 2019 by lcmm@melchionnalaw.com

International trade

Balance of Trade for goods exchanged between the EU, France, Germany, Switzerland, Italy and the US: the first nine months of 2019

The balance of trade for goods is the net amount of EU and US exports and imports over a stated period of time. In 2019, the trade balance of goods between EU and the US shows a...

Posted on 19th December 2019 by lcmm@melchionnalaw.com

International trade

US responses to France Digital tax

On December 2, 2019, the Office of the US Trade Representative (USTR) concluded its investigation under section 301 of the Trade Act of 1974 into France’s new Digital Services...

Posted on 6th December 2019 by lcmm@melchionnalaw.com

International tax

Tax planning in Luxembourg: Directive 2018/822

On July 1, 2020, the Directive 2018/822, commonly referred to as DAC 6 or Mandatory Disclosure for tax intermediaries, will be effective in Luxemburg. A bill implementing this...

Posted on 6th November 2019 by lcmm@melchionnalaw.com

Food law

October 21, 2019, Update on “The United States is set to impose new tariffs on goods imported from certain countries of the European Union: the WTO DS316 Decision.” Italian Fruit and Meat

On October 18, 2019, the additional tariff on goods imported from Italy entered into effect. Among other items, certain Italian fruits and meats are now subject to an additional...

Posted on 5th November 2019 by lcmm@melchionnalaw.com

Food law

Milk Sounding: How to reconcile legal definitions and consumers’ perception of products with potentially misleading labels: towards the modernization of food standard of identity

Since the 1930s, the Food and Drug Administration (“FDA”) has defined milk as “lacteal secretion [. . .] obtained by the complete milking of one or more healthy cows”. (21 CFR...

Posted on 24th October 2019 by lcmm@melchionnalaw.com

Finance and banking

Bank Secrecy: US, Luxemburg, and Switzerland’s Governments have agreed to limit bank secrecy rule. The Additional Tax Protocol and Article 28 of the US-Luxembourg Tax Treaty

2019 Tax Protocol with Luxembourg On September 20, 2019, the US Treasury Department announced the ratification of a new tax protocol (“Additional Protocol”) between the United...

Posted on 24th October 2019 by lcmm@melchionnalaw.com

View Latest Posts
Business law

California’s new data privacy law


lcmm@melchionnalaw.com
California’s new data privacy law
Posted on 2nd January 2020 by lcmm@melchionnalaw.com

The California Consumer Privacy Act (CCPA) entered into effect on January 1, 2020, bringing with it a slew of new protectionary measures for consumer data. Below is a summary of the new legislation’s key points.

New requirements for qualifying businesses

The CCPA requires businesses that collect personal information to disclose all collected information to a consumer upon request. If and when requested, the disclosure of personal information must be free of charge, delivered within 45 days either electronically or by mail, and in an easily accessible format. The Act also requires businesses to inform their customers at or before the point of collection what categories of information the business collects, the purpose of collecting the information and a notice that the information may be sold to third parties (if applicable).

Additionally, the Act requires, upon consumer request, that businesses engaged in selling or sharing personal information to disclose the categories of information sold or shared and the category of business intended to receive such information. With certain exceptions for law enforcement and legal compliance, businesses are also required to delete any customer information upon the customer’s request.

Finally, special regulations apply if the business has “actual knowledge that a consumer is less than 16 years of age”:

  1. Minors between 13 and 15 years:  Businesses may not sell the information of these consumers unless that child has opted in.
  2. Minors under 13 years: Businesses may not sell the information of these consumers unless their parent or guardian has opted in for them.

Exceptions to the CCPA

This Act does not apply to the following:

  • Information collected through a one-time transaction if the business does not sell or retain the information;
  • Medical information and health care providers governed by other privacy legislation; and
  • Collection, processing, sale, or disclosure of information pursuant to the Fair Credit Reporting Act, Gramm-Leach-Bliley Act, California Financial Information Privacy Act, and Driver’s Privacy Protection Act of 1994.

What to do with consumers who opt-out

Businesses may not deny goods or services, charge different rates, or provide different levels of service based on a consumer’s exercise of any right provided under the CCPA. However, businesses may offer reasonable financial incentives or compensation for opting-in. Businesses may also offer different prices, rates, levels of services, or quality of goods to customers who opt-in if the offer is directly related to the value of the consumer’s personal information.

Business requirements

A business must comply with the CCPA if it is a for-profit legal entity that satisfies all of the following criteria:

  • Collects customer personal information or has other entities that collect customer personal information on the business’ behalf;
  • Alone or jointly determines the purposes and means of collecting consumer information;
  • Does business in California;

And meets one or more of the following thresholds:

  • Has annual gross revenue over $25 million;
  • Buys, receives, sells, or shares for commercial purposes the personal information of 50,000 or more consumers, households, or devices; or
  • Derives at least 50% of its annual revenue from selling consumer personal information.

CCPA definition of “personal information”

The legislation defines personal information quite broadly, including “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” (1798.140(o)(1)).

Thus, personal information includes but is not limited to identifiers like name, address, online identifiers, IP address, email address, social security number, driver’s license number, and passport number. The following are also considered personal information:

  • Characteristics related to a protected class under federal or state law;
  • Commercial information including consumer history and personal property;
  • Biometric or geolocation information;
  • Internet activity including browsing and search history;
  • Professional, employment, or educational information; and
  • Inferences drawn from this information to create a profile about the consumer.

Personal information does not include:

  • Information that is public record in accordance with federal, state, or local legislation; and
  • De-identified aggregate consumer information.

Implementing the new requirements

  • The Act requires businesses to provide at least two opt-out mechanisms. At minimum, businesses must offer a toll-free customer service phone line where opting-out is possible. If the business maintains a website, the website must also offer an opt-out option;
  • Do not try to avoid the provisions contained in this legislation. The Act instructs courts to disregard any intermediate steps a business takes to avoid its reach;
  • Stay up to date on new rules related to the CCPA. On or before July 1, 2020, the California Attorney General will release further regulations supporting the implementation of this bill; and
  • Update all data and privacy agreements with customers and third-party data management/sale agreements with other businesses;

Sanctions for non-compliance

If a business does not resolve any alleged non-compliance with the Act within 30 days of notice, it may result in a civil penalty of $2,500 for each violation and $7,500 for each intentional violation. In addition, a consumer may recover actual damages caused by a data breach or an amount between $100 and $750 per consumer per data breach, whichever is higher.

Conclusion

Although the CCPA is the first of its nature in the US, privacy protection is gaining momentum among legislators. In November of 2019, US Senator Maria Cantwell introduced the Consumer Online Privacy Rights Act, which would apply to all Americans and contains many of the same protections as the CCPA. A few days later, fellow Senator Roger Wicker responded with a bill of his own. In addition, New York state legislators have introduced a bill that is even bolder than California’s.

Currently, consumer data protection is regulated by a patchwork of state and sector-specific legislation. Perhaps this new trend towards data privacy – both in the US and abroad – will facilitate the creation of a much-needed comprehensive national framework.

The information provided here does not, and is not intended to, constitute legal advice but simply information for general purposes only and may not be the most up to date. Use of our website or any of its links or resources do not create an attorney-client relationship between the reader, user, or browser and the law firm. The views expressed at, or through, this site are those of the individual authors writing in their individual capacities only.

lcmm@melchionnalaw.com
  • Share Article:
  • Twitter
  • Facebook
  • Pinterest
  • LinkedIn
  • Reddit