|
The California Consumer Privacy Act is a landmark piece of consumer privacy legislation, which passed into California law on June 28th of 2018. The bill is also known as AB 375. This act is the strongest privacy legislation enacted in any state, giving more power to consumers with regards to their private data. |
《加州消费者隐私法》是消费者隐私立法的里程碑，该法案于 2018 年 6 月 28 日通过成为加利福尼亚州法律。该法案也被称为 AB 375。这项法案是任何州颁布的最强有力的隐私立法，在消费者的私人数据方面赋予了更大的权力。 |
|
Companies that already comply with GDPR may find that they currently meet many of the requirements set forth in the California Consumer Privacy Act. With many experts predicting that other states will pass similar legislation in the coming years, companies across the U.S. that take proactive steps today to better protect consumer data will be best equipped for future regulations. |
已经遵守 GDPR 的公司可能会发现，他们目前满足了《加利福尼亚州消费者隐私法》中规定的许多要求。许多专家预测其他州将在未来几年通过类似的立法，因此，美国各地今天采取积极措施以更好地保护消费者数据的公司将为未来的法规做好最好的准备。 |
|
These two data privacy regulations fundamentally extend individuals’ rights to the data being captured about them, who has it, and how it is used. This also typically includes the ability to have private data deleted or barred from use in certain circumstances. While GDPR is much more prescriptive than CCPA, they both share a notion of protection or preservation of the data that organizations must comply with, for example backups and archives. |
这两项数据隐私法规从根本上将个人的权利扩展到所捕获的关于他们的数据、谁拥有以及如何使用这些数据。这通常还包括删除或禁止在某些情况下使用私人数据的能力。尽管 GDPR 比 CCPA 更具规范性，但它们都有保护或保存组织必须遵守的数据的概念，例如备份和存档。 |
|
Failing to comply with governance/governmental regulations is not an option and can cause many undesirable consequences, as evidenced in ESG research (see Figure 1).[1] The addition of this new breed of data privacy regulations, and in the case of the U.S., the potential multiplication of these regulations, with each state offering its own variation, will only create additional exposures, audits, and risks for those who don’t plan accordingly. |
如 ESG 研究（见图 1）所示，不遵守治理/政府法规不是一种选择，可能会导致许多不良后果。[1] 增加了这一新的数据隐私法规，在美国，这些法规可能会增加每个州都提供自己的变体，只会为那些没有相应计划的人造成额外的风险曝光、审计和风险。 |
|
It should also be noted that neither CCPA (nor GDPR) supersedes other compliance or regulatory requirements (for example, the requirement to keep data archived for x number of years). |
还应该注意的是，CCPA（或 GDPR）都不能取代其他合规性或监管要求（例如，将数据存档 x 年的要求）。 |
|
[1] Source: ESG Master Survey Results, 2018 Data Protection Landscape Survey, November 2018. |
[1] 资料来源：环境、社会、管治总体调查结果，2018 年 11 月，2018 年 11 月。 |