Will the CCPA 2018 set a new privacy standard for the USA?
For many years business has been free to cpature and use digital data as it will. There have been very few rules, particularly in the USA, therefore business has taken advantage of the data it is preseented with. After 20 years, government has realized the potential harm (see Cambridge Analytica) to it's citizens and have started putting data protection laws in place to protect citizen's rights and to ask businesses to prove they have consent to do what they do. There in lies the rub as they say. Most US businesses will have to change practices, policies & procedures regarding the data management of US citizens.
With all data protection laws comes a standard of compliance. Every standard of compliance requires new systems and processes for record-keeping. The new law must be operationalized within your company.