California attorney general looks to expand new data privacy law

The California state attorney general is aiming to give more teeth to a new data privacy law before it takes effect in 2020 by expanding his and Californians’ right to sue companies for damages. Under SB561, unveiled by CA Attorney General Xavier Becerra and CA state Sen Hannah-Beth Jackson (D-Santa Barbara), consumers would be able to take a business to court for sharing or selling their personal information without permission. The attorney general’s office also would be allowed to take action against a company without first giving it a chance to correct violations of the data privacy law. CA AG Becerra said the proposed changes were based on concerns he raised in 2018 as the original bill was being drafted that it was not enforceable. CA AG Becerra said giving companies a chance to address violations of the law before they can be held accountable is a “get-out-of-jail-free pass.” Consumers also would be able to sue for more than just a data breach under SB561. Justice Department officials said customers could sue if, for example, a company didn’t provide a link on its website where customers could opt out of having their data sold.