The California Consumer Privacy Act: Key Takeaways for Insurers and Insurance Regulators

The California Consumer Privacy Act (“CCPA”) will impact how insurers collect, store, sell and process the personal information of California consumers. Other US states are likely to soon follow suit—there are currently at least 11 other states with pending privacy laws that incorporate CCPA-like concepts and requirements. In this Legal Update, we examine the history of the CCPA, its key provisions, its current legislative status (let’s just say, “it’s complicated”) and practical takeaways for insurers and insurance regulators. (Spoiler Alert: Insurers should not be delaying compliance efforts.)