The sweeping California Consumer Privacy Act of 2018 merits attention – it affects more companies than many realize, differs from the GDPR in important ways and may presage other similar state privacy laws. The law will most likely be amended before its January 1, 2020, implementation date, but organizations would be wise to start preparing now. We analyze the new requirements. See also “The GDPR’s Data Subject Rights and Why They Matter” (Feb. 28, 2018).