Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

favicon.ico

favicon-16x16.png

favicon-32x32.png

apple-touch-icon.png

MoFo Favicons

Terms / Notices

Cookies

Privacy Policy

Attorney Advertising

Secure Login

Alumni

  Facebook

MoFo Facebook

  Linkedin

MoFo LinkedIN

Twitter

MoFo Twitter

YouTube

MoFo Youtube

Morrison Foerster - Footer

You have not solved the recaptcha challenge yet or session expired, try again.

Disclaimer

Unsolicited e-mails and information sent to Morrison & Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison & Foerster. If you are not already a client of Morrison & Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Culture

Offices

Careers

Stay Connected

Chris Lyon spoke to Law360 for a story on the California attorney general's draft regulations for implementing the California Consumer Privacy Act (CCPA) and whether they exceed the scope of privacy law.

Do Calif. AG’s New Regs Exceed Scope of Privacy Law?

About Morrison Forester

people-default-header-desktop.jpg

people-default-header-mobile.jpg

Default Meta Data

Chris Lyon spoke to <a target="_blank" href="http:https://media2.mofo.com/v3/assets/blt5775cc69c999c255/blt9bc8b06943980fee/627320ea4886af2aa2be13ec/191202-exceed-privacy-law.pdf">Law360</a> for a story on the California attorney general's draft regulations for implementing the California Consumer Privacy Act (CCPA) and whether they exceed the scope of privacy law.Chris discussed the issue with the prohibition on treating customers differently if they exercise their rights to have their data deleted or not shared with third parties, with the restriction dealing a blow to popular services such as loyalty programs that are premised on consumers’ exchange of information for benefits. The restrictions may “lead down the path of treating personal information as a mere commodity, which seems contrary to the original intent of the CCPA, which would be burdensome for both customers and consumers.”“Many companies were disappointed that the draft regulations didn’t provide more or better guidance about how to authenticate a requestor’s identity before granting access to a consumer’s personal information,” Chris said about the additional issue of verifying the identity of consumers making data requests. The regulations “give no indication of how to select those ‘reliable’ data points, or what to do if a company has only data points that would be fairly easy for anyone to find, such as name and home address.”

Do Calif. AG’s New Regs Exceed Scope of Privacy Law?

Sign Up

Privacy + Data Security