Beginning in 2020, California’s new privacy law will require businesses to implement new controls and processes relating to their customer data. California’s law applies to companies that do business in California (if they have more than $25 million in annual revenue or 50,000 customers), regardless of their location throughout the U.S.