Roku Girds for ‘Far-Reaching’ Impact of New California Consumer Privacy Law

The “potential effects” of the new California Consumer Privacy Act “are far-reaching” and may force Roku to modify its “data processing practices and policies and to incur substantial costs and expenses” to comply, said a 10-K SEC filing Friday. The CCPA (see 1812070054) was recently amended and may be amended again before it takes effect in January, said Roku. The legislation “places additional requirements on the handling of personal data,” it said. It gives residents “expanded rights to access and require deletion of their personal information, opt out of certain personal information sharing and receive detailed information about how their personal information is used,” said the company. It stipulates civil penalties for violations, plus “a private right of action for data breaches” that might raise Roku’s exposure to litigation, it noted: “We are continuing to assess the impact of the CCPA and proposed amendments to the law on our business.”