On January 1, 2020, entities doing business in California will have to comply with the California Consumer Privacy Act (CCPA), a first-in-the-nation consumer privacy law that grants numerous privacy rights to California residents. The CCPA will require thousands of businesses, including cannabis businesses, to undertake significant compliance efforts or risk substantial penalties. For cannabis businesses, however, compliance efforts must be considered in light of other applicable privacy laws.