New SIA Resources to Help You Navigate Data Privacy Regulations

With the California Consumer Privacy Act (CCPA) and the European Union’s (EU’s) General Data Protection Regulation (GDPR) in effect, take advantage of these two new guidance documents from SIA to help your firm navigate these regulations’ impact on your business. Both reports are available exclusively for SIA members; your firm’s SIA membership gives you access.

California Consumer Privacy Act

In 2018, California lawmakers passed the California Consumer Privacy Act to strengthen the state’s constitutional guarantee of privacy. As stated in the legislative text, the bill, in general, is intended to ensure that Californians are able to know what personal information is collected about them, know whether their personal information is sold or disclosed and to whom, access their personal information, prohibit the sale of that information, request that a business delete their personal information and receive equal service and price, whether or not they exercise their privacy rights.

This white paper provides SIA’s analysis of the CCPA, its provisions and reach and how it impacts the security industry.

General Data Protection Regulation

Europe’s GDPR imposes strict limits on the collection, storage and use of personal data in the EU. Among other things, GDPR establishes requirements for notification and consent whenever personal information is exchanged or monitoring is taking place, enacts a “right to be forgotten” in certain instances and imposes steep fines – as much as 4 percent of worldwide revenue or 20 million euros, whichever is greater – on violators.

This white paper provides an overview of the GDPR’s impact on non-EU organizations, including when these organizations are covered and what they need to do to comply.

The provided white papers are not intended to provide legal advice. Individuals and organizations who are unsure of their compliance responsibilities should consult qualified legal counsel.