50% of US Organizations Not Prepared for CCPA

According to a report released by the International Association of Privacy Professionals (IAPP) and OneTrust, prior to the California Consumer Privacy Act (CCPA) becoming enforceable on  January 1, 2020, nearly 50% of all companies will not be ready to comply with CCPA.

The groups reviews how ready US organizations are for the new regulations and found that reputation and consumer privacy are the biggest drivers for CCPA compliance. Despite this just 55% of companies say that they will be ready by the January go live date.

Rita Heimes, IAPP research director and data protection officer, said in a press release: “Our survey targeted a community of well-informed privacy professionals, and even they seem a bit caught off guard by the CCPA. Nevertheless, they seem to think it’s not likely to be replaced by a federal law any time soon.”

25% of the firms reviewed thats that they will be in compliance by the enforceable date of July 1, 2020.

Kabir Barday, OneTrust CEO and fellow of information privacy (FIP) said:  “The CCPA is a major moment for the U.S. privacy landscape, and our research reveals companies that didn’t need to overhaul privacy practices for GDPR compliance are now struggling to meet the CCPA’s 2020 deadline. With OneTrust, organizations can simplify this compliance process and implement an automated and research-backed technology solution to fast-track their efforts and efficiently meet CCPA requirements, including the 12-month ‘look back’ clause which forces companies to handover consumer data handling practices as far bas as January 2019. We’ve already seen a massive increase in customer interest in the CCPA, and are helping many organizations make the necessary CCPA operational changes to leverage the new law as a stepping stone for building a global privacy program.”

There was, according to the report, a link between those companies/organizations that are already in compliance with the EU’s General Data Protection Regulation and their level of preparation for the introduction of CCPA. Among those not yet prepared for the new legislation the main obstacles to being ready cited were a lack of time. On the other side of this coin preserving company reputation was seen a something that is making companies move quickly to ensure compliance.