What is CCPA?

CCPA stands for the California Consumer Privacy Act. It is a California privacy law that gives eligible California consumers greater control over their personal information and requires covered businesses to provide specific privacy rights and disclosures. The law took effect in 2020 and was later amended by the California Privacy Rights Act (CPRA). The CPRA amended the CCPA rather than creating a separate privacy law.

Key CCPA Rights

• Right to know: Consumers can ask what personal information a business collects, uses, shares, or sells and why.
• Right to delete: Consumers can request deletion of their personal information, subject to certain exceptions.
• Right to opt out: Consumers can opt out of the sale or sharing of their personal information, including sharing for cross-context behavioral advertising.
• Right to correct: Consumers can request correction of inaccurate personal information.
• Right to limit: Consumers can limit certain uses and disclosures of sensitive personal information.
• Right to non-discrimination: Businesses generally cannot discriminate against consumers for exercising their CCPA rights.
• Privacy disclosures: Covered businesses must provide notices explaining their data collection and privacy practices.
• Global Privacy Control (GPC): Covered businesses that sell or share personal information must honor valid GPC opt-out signals where applicable.

Who Does CCPA Apply To?

The CCPA applies to certain for-profit businesses that do business in California and meet specified thresholds, such as having more than $25 million in annual gross revenue, handling the personal information of at least 100,000 California residents or households, or deriving at least 50% of annual revenue from selling California residents’ personal information.

In short: CCPA is a California privacy law designed to give consumers greater transparency and control over their personal information, including rights to know, delete, correct, and opt out of certain data uses.