The California Consumer Privacy Act (CCPA) has addressed data privacy issues for the state’s residents since 2020. It was amended by the California Privacy Rights Act (CPRA), which went into effect on January 1, 2023. These laws have placed requirements on businesses that collect, store, process, or transfer data related to California residents. One aspect of the law that people may not be aware of involves B2B data privacy, and businesses will need to understand the requirements that will apply when they handle data related to other businesses that are located in California or employ California residents.
How CCPA/CPRA Addresses Data Related to B2B Contacts
When the CCPA was initially passed, it included an exception for B2B data. However, following the implementation of the CPRA, this exception was eliminated, and the CCPA now regulates data about B2B contacts. These contacts may include any personnel working for a California business, including owners, officers, directors, managers, employees, and contractors, as well as a business’s vendors, suppliers, or customers.