Greater Cost to Small Businesses:

CCPA ignores the requirements of different industries, and thus hurriedly excluded numerous small companies. As the current definition of business stands, the CCPA law is likely to affect most small businesses adversely. While 50,000 users each day don’t ring a bell in your ear but if you can foresee in hindsight it comes up to 150 users per day which is not a huge number considering the population of the US.

Due to the confusing definitions surrounding this act, the CCPA is going to sweep in a lot more business than expected. A lot of small businesses will fail to gather the funds necessary to pay off the expenses related to the new law and must choose between complying with the new law or exit the market. The majority of small businesses interconnect with larger or other small companies to recover their profits. Unfortunately, only a couple of businesses can be considered CCPA compliant now. Many have yet to begin the compliance process while most are in different stages.

Common Questions About CCPA:

Is CCPA a copy of GDPR?

No. GDPR has a far wider scope in its operation. Just because you are compliant with GDPR doesn’t necessarily mean you comply with CCPA. Although GDPR and CCPA share many common features, you still need to meet specific requirements concerning the sale of personal data.

Does CCPA apply to SME businesses?

Small or big business is irrelevant to the CCPA. It is not focused on the size of your business, but whether it meets certain criteria as mentioned above.

What is personal data according to CCPA?

CCPA defines personal data as any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal data broadly includes categories that identify the person indirectly such as aliases, social security numbers, browsing history, credit card information, personal identifiers, geo-location data, e-mail addresses, and others. Publicly available information is not a subset of personal data according to CCPA.

Ways in which users can contact you regarding their personal information?

CCPA grants the right to the user to know about the personal data you have collected from them; they can request changes to the information, move it somewhere else, or delete it. At a minimum, you have to provide a web address to your website and a toll-free telephone number.

Have you prepared data maps of California residents?

Data map, or data inventory, is a process of figuring out what type of information you collect, why you do it, where it is held, with whom it is shared, how it is transferred to third party vendors and other questions related to the data collection and use of data regularly. It is not required by the CCPA, but it is a good practice that minimizes the risks associated with the user’s data.

Is FileCloud CCPA compliant?

FileCloud cloud services provide you with CCPA compliant file sharing services that are not only compliant with the guidelines of CCPA but also come with advanced infrastructure to protect consumer data by using the latest technology in its operation.

Positive impact of CCPA:

A lot of businesses still need to get ready to meet the CCPA deadline. Streamlining the data collection process by a company, along with the storage and processing methods can go a long way in making the system more efficient. If your business has to know what must be done for its IT systems to meet the requirements of CCPA, FileCloud is your best bet.

Apart from risk assessment and review, FileCloud also assesses your existing data protection methods and policies. This helps you implement long-term security and privacy plan. Filecloud offers a fully CCPA compliant file sharing cloud ecosystem that is both secure and comes with the latest encryption technology to protect customer’s data.

5 steps that businesses and Companies must undertake to prepare them to stay CCPA compliant:

• Conduct a privacy assessment and document data processing activities for the data collected, disclosed or sold
• Review security tools and plans to minimize the risk of a data breach and impending fines
• Identify all the impacted stakeholders including marketing, IT, business development, and product development teams
• Review if you need to make any changes to databases, systems, or even vendors to comply with the law
• Evaluate the current processes and see if they needed an upgrade