Effective 1 January 2020, a game-changing privacy law will go into effect in California, the California Consumer Privacy Act of 2018 (CCPA). The law will have profound implications for businesses that collect personal information about persons in California, even if the business is not based in the state. Given the complexities of the CCPA, businesses will need to invest substantial implementation time to be ready by the 1 January 2020 effective date.