The use of data by marketers and advertisers has fueled the modern digital economy, and powers many of the businesses that have become staples in the American marketplace. At the same time, across the nation and the globe, lawmakers have been looking for ways to force companies to tighten up their data privacy and data security practices.

Late last year, California lawmakers enacted the California Consumer Privacy Act of 2018 (CCPA) to provide for more stringent requirements and practices on the part of companies handling California consumers’ electronic information and data. While all businesses that fall under the scope of the CCPA can expect the compliance process to be complex, complying with the law may be an especially thorny undertaking for data-driven marketing and advertising businesses, as the CCPA encompasses much of the information relied on by, and disclosed among, those entities that operate in the online advertising ecosystem.

Notice and Disclosure Obligations