Sigman & Khan, PLLC

10/17/2026

Thank you to Mooo Burlington for hosting the Burlington Area Chamber of Commerce MA PM networking event in their beautiful event space. Delicious food and wonderful food while rubbing elbows with Burlington’s best

10/17/2026

Proud to be a supporter of the Women’s Bar Association annual gala again this year.

10/07/2026

Always celebrate the wins! Closed a client’s $8M business sale today. Celebrating with margaritas at Rocco’s Tacos.

Burlington Area Chamber of Commerce MA

10/06/2026

Our very own Senior Associate, Attorney Tania Shah!

Congratulations to Western State Professor Tania Shah on being selected to serve on the State Bar of California's Law School Council! 🎉

During her four-year term, Tania will help advise the State Bar on issues affecting ABA-approved law schools across California and represent Western State in those important conversations. We're proud to have Tania representing Western State in these important conversations about legal education.

09/29/2026

Thank you to Burlington Area Chamber of Commerce MA and all of the amazing restaurants that participated in this year’s Taste. Another fantastic night.

09/18/2026

Thank you Eddie V's Burlington for being such a great host for the Burlington Area Chamber of Commerce MA Thursday PM networking event this month. Great service and delicious food as always. And congrats to Tess on her Employee of the year honor - well deserved!

08/19/2026

Congratulations to Rocco’s Tacos - Burlingtons newest eatery. The dining room looks great and the menu looks even better!



Burlington Area Chamber of Commerce MA

06/26/2026

We are thrilled to officially unveil our brand-new website for Sigman, Khan & Chubb, PLLC!

A massive thank you to Heidi Sporel and E2Excel Marketing for bringing our vision to life with such precision, patience, and brilliant design expertise.

Explore the new look and let us know what you think: www.skclegal.com

06/23/2026

Thanks to the amendment by the California Privacy Rights Act, California’s Consumer Privacy Act (CCPA) continues to expand, and all core requirements are now in effect. Importantly, this law is not limited to California-based companies - it can potentially apply to businesses located anywhere if they engage with California consumers.



Does the CCPA apply to you?

The law applies to for-profit businesses that do business in California and meet at least one of these thresholds:

• Annual revenue over $25 million (as of January 1 of the prior year)

• Handle personal data of 100,000 or more California consumers or households

• Derive 50% or more of revenue from selling or sharing personal data ($25 Million annual revenue not needed)



“Doing business in California” can include having employees or a physical presence in the state (such as a store, office or warehouse), or regularly transacting with California customers (as determined under the CA Tax Code and the CA Corporations Code).



What should you do if it applies?

If your business is covered, key steps include:

• Identifying what personal data you collect and how you use it

• Updating your privacy policy and collection notices

• Making it easy for consumers to exercise their rights

• Reviewing website consent tools to avoid misleading or confusing design

• Updating vendor agreements to address data use obligations

• Establishing procedures to respond to consumer requests within required timelines



Core compliance requirements (now in effect)

Covered businesses must:

• Maintain a clear, accessible privacy policy

• Provide notice at or before collecting personal information

• Offer and honor consumer rights, including opt-out rights

• Limit data collection to what is reasonably necessary for the disclosed purpose

• Train staff on data security and CCPA compliance, and retain records of consumer requests



Additional obligations may apply if you:

• Sell or share personal data (opt-out links and browser signal requirements)

• Handle large volumes (100K +) of consumer data (annual reporting metrics0

• Use automated decision-making tools (new rules effective January 1, 2027)

• Engage in high-risk data processing (risk assessments required)


IMPORTANT DATES
Now: Core compliance requirements are already in effect

January 1, 2027: Automated decision-making rules fully enforced

December 31, 2027: Deadline for completing risk assessments for existing high-risk activities

2028–2030: Phased cybersecurity audit deadlines (based on business size)



Enforcement and penalties

Non-compliance can result in penalties of up to $2,500 per violation on a per consumer basis ($7,000 if intentional), as well as potential consumer lawsuits in the event of a data breach.



Key takeaway

Even small and mid-sized businesses should evaluate whether the CCPA applies, particularly if you have customers in California or expect to grow into one of the threshold categories.



We recommend working with an attorney that specializes in Data Privacy, a Data Security Firm or Consultant, an independent cybersecurity auditor, or establishing an internal role such as a Chief Information Security Officer if the CCPA applies to your business. We are happy to make recommendations and introductions.

06/19/2026

Thank you to Fogo de Chão Burlington for being such a gracious host for the Burlington Area Chamber of Commerce MA PM networking. As always a great spread and welcoming staff!