By December 2019, marketers were preparing for the California Consumer Privacy Act to take effect on January 1, 2020. The IAB and IAB Tech Lab had been working on compliance frameworks and technical specifications for publishers, advertisers and ad tech companies. Privacy was no longer only a European GDPR concern.

For SMBs, CCPA preparation was a reminder that U.S. privacy expectations were changing. Even businesses below certain legal thresholds needed to pay attention because platforms, partners and customers were moving toward clearer consent and data choice.

Privacy changed the marketing checklist

Lead generation, retargeting, analytics and email marketing all depend on trust. A business that cannot explain how it collects and uses data risks damaging credibility. Privacy work also forces better data organization, which can improve reporting and customer follow-up.

Burns’ take is that privacy readiness should be practical, not performative. “Small businesses do not need legal jargon pasted everywhere. They need honest data practices, clear notices and a process for respecting customer choices.”

What SMBs should have prepared

• Privacy notices: Review whether website language is current and understandable.
• Data maps: Know where customer information is collected and stored.
• Vendor lists: Understand which tools receive marketing data.
• Opt-out processes: Make customer choices easy to handle internally.

Brand Fuel Digital’s View

CCPA preparation marked the start of a U.S. privacy era for digital marketers. SMBs that build transparent, organized data practices will be better prepared for platform changes and future regulation.

Sources: IAB Tech Lab on the CCPA compliance framework and IAB CCPA Compliance Framework guidance.