The California Consumer Privacy Act (CCPA) now requires that investment firms serving California residents must be ready to provide clients with access to any information it has collected about them, as well as any third-parties it shares the data with.
The CCPA applies to any company that meets one or more of the following criteria: $25 million or more in annual revenue; personal data on 50,000 people or more; and/or makes more than half their revenues from the sale of personal data. A firm does not have to be located in California to be required to comply with the law.
Greyline’s CCPA service provides support to investment firms to ensure that they remain compliant with the law. This includes data mapping, assisting with updating your privacy policies, setting up designated methods for consumers to contact your firm, responding to verifiable consumer requests, and more.