Nearly Half of US Orgs Not Ready for California Consumer Privacy Act Deadline

Stu Sjouwerman | May 6, 2019
CCPA-GDPR

InfoSec Mag observed something a bit worrisome. "In advance of the California Consumer Privacy Act (CCPA) going into effect January 1, 2020, researchers analyzed how prepared US organizations are for the new regulations and found that nearly half of all companies will not be ready to comply with CCPA at the deadline.

According to research conducted by the International Association of Privacy Professionals (IAPP) and OneTrust, reputation and consumer privacy are the biggest drivers for CCPA compliance, yet only 55% of companies report that they will be ready by the January effective date.

"Our survey targeted a community of well-informed privacy professionals, and even they seem a bit caught off guard by the CCPA," said Rita Heimes, IAPP research director and data protection officer, said in a press release."Nevertheless, they seem to think it's not likely to be replaced by a federal law any time soon."

Though nearly half of those organizations surveyed will not be ready for the initial effective date, an additional 25% claimed they will be in compliance by the enforceable date of July 1, 2020.

"The CCPA is a major moment for the U.S. privacy landscape, and our research reveals companies that didn't need to overhaul privacy practices for GDPR compliance are now struggling to meet the CCPA's 2020 deadline," said Kabir Barday, OneTrust CEO and fellow of information privacy (FIP), in the release.

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.