Digiday Research: 52 percent of publishers haven’t started preparing for the California Consumer Privacy Act
The California Consumer Privacy Act will come into effect in January, but many publishing executives remain completely unaware of the new law.
When Digiday polled 200 U.S. publisher executives this February only half of them said they were aware of what CCPA was, and over half of those aware of it said their companies have not yet begun preparing for its introduction.
The CCPA will grant California’s 40 million residents access to any personal data collected from them by publishers and other online advertising companies, and will allow them to request its deletion. The law could also mean penalties on companies of up to $2,500 per person for each violation they commit, such as selling the information of a person who has specifically asked that their information not be sold.
But despite the fact the legislation becomes enforceable in less than a year and could have considerable financial repercussions for non-compliant companies, few publishing executives who were aware of the legislation said their companies were taking steps to prepare. Of the respondents who know of the CCPA, only 48 percent said their companies had begun work to ensure compliance.
If companies have yet to begin working on CCPA regulations, they should do so quickly. Some believe that complying with the CCPA will be harder than adhering to General Data Protection Regulation. Compared to the four years companies had to prepare for GDPR, publishers have just months to prepare for CCPA.
And because CCPA is not identical to the GDPR that went into force last May in the European Union, companies won’t be able to copy and paste their GDPR provisions to their California audiences and claim to follow the law. There are some “overlapping similarities”, however, according Stephen Hicks, general counsel at Ziff Davis.
To make matters more complicated, there remains significant uncertainty around what the final legislation will actually look like due to potential amendments, trade group recommendations and ongoing lobbying efforts in Congress to create Federal-level laws.
Because of the uncertainty, “no publisher can say it’s completely compliant now,” said Hicks. But he added, “it is not too soon for publishers to spend time understanding it and taking measures to prepare like updating privacy policies.” Other steps publishers can take is mapping out their user data sources to more easily identify California residents data. Building out and testing “Do Not Sell” buttons on their homepages for consumers to opt out of having their data sold to third-parties isn’t a bad idea either.
One reason CCPA hasn’t garnered as much attention in the media world as GDPR is that agencies and brands aren’t reliant on publishers gaining user consent for them to collect consumer information. Unlike GDPR where companies needed a legal basis to collect consumers personal information, that is “not necessarily an issue with CCPA,” said Hicks. Without shared responsibility to collect personal user data, marketers aren’t culpable if publishers aren’t compliant.
Some publishers are adopting a wait-and-see approach with regards to CCPA regulations. One mid-sized publisher told Digiday that it was waiting, “to see if the Federal government steps in,” before it spends time and resources to the issue.
Regardless of the reason, many expect publishers to scramble at the last-minute to satisfy the CCPA requirements. The anonymous publisher admitted, “we didn’t start working on GDPR until six months before the deadline, and we’ll probably do the same for CCPA.”
Meanwhile, publishers have other reasons to be concerned with the CCPA. Under it, consumers can request publishers stopping selling their personal information to third parties like agencies or ad-tech vendors that use it for targeting purposes.
While selling audience data does not provide significant revenues for publishers, it is not uncommon either. Earlier Digiday research found that nearly 25 percent of publishers sell their audience data. And in a time of squeezing margins for media businesses, every extra dollar helps.
Media Briefing: Publisher execs fear lack of visibility for Q3, but feel steady year over year
Publisher execs share how Q2 shook out for their businesses as they brace for an equally murky second half.
Digiday+ Research: Nearly two-thirds of publishers think they will lose when the third-party cookie dies
Publishers have been busy prepping for the end of the third-party cookie, but that doesn't mean they think they'll come out on top in the post-cookie era. In fact, publishers count themselves among those who stand to lose from the end of the cookie.
As AI spreads across the marketing landscape, data’s role will be key to success or danger
There’s a growing awareness of the risks inherent in AI's ultra-powerful potential, but whether enough steps are being taken to mitigate them remains a huge question mark.
SponsoredWhat the measurement and currency discussion really means to TV advertisers
Ali Mack, head of TV and agency, Experian Major streaming video providers have recently made headlines by adopting new currencies for ad measurement, threatening Nielsen’s long-standing TV ratings monopoly. NBCUniversal, for example, has certified iSpot and VideoAmp as currencies for advanced audiences and formed the Joint Industry Committee with Paramount, TelevisaUnivision and Warner Bros. Discovery. […]
Spotify cancels six true crime podcasts amid layoffs, Gimlet-Parcast merger
Spotify is canceling six shows and laying off 200 people as it merges its Gimlet and Parcast units to push its podcast business towards profitability.
‘Not the future’: European publishers remain steadfast in blocking alternative IDs to third-party cookies
Some European publishers believe alternatives to the third-party cookies, probabilistic or deterministic, will do more harm than good to their ads businesses.