Bethany Lukitsch of McGuireWoods runs down what the new regulations mean for companies based in California and beyond.

CCBJ: The California Consumer Privacy Act (CCPA) takes effect January 1, placing new data protection and user requirements on businesses that collect or sell consumers’ personal information. What do the new regulations mean for companies doing business in California?

Bethany Gayle Lukitsch: It’s important to keep in mind that this statute doesn’t just affect companies that are physically present in California but a much broader, more universal group of companies. In fact, any company that touches or does business with a California consumer is likely going to be covered by the act. The act has broad definitions and will have significant impact on the way companies in the United States and even foreign companies do business with California residents. If companies haven’t started to pay attention to the CCPA and what it means for their business, they need to immediately turn their attention and do so.

Remarks as recent as late September from the California attorney general’s office suggest they are ramping up their enforcement team. While they are not able bring enforcement actions until summer of next year, they have said