Under the new Protections for Consumer Data Privacy Act (the “Act”), as of September 2018, most businesses are required to have a written policy regarding the storage or retention of “personal information.” In addition, businesses are required to have a notification pl...