What Is a “Sale” under the CCPA?

Under the CCPA, a sale of personal information generally occurs when a business sells, rents, releases, discloses, or otherwise makes a consumer’s personal information available to another business or third party in exchange for money or other valuable consideration.

A sale does not necessarily mean selling a customer database for cash. Certain data transfers made as part of a commercial arrangement may also fall within the definition.

However, the CCPA excludes certain disclosures from the definition of a sale, including disclosures to qualifying service providers or contractors that meet the applicable requirements. Consumers have the right to opt out of the sale or sharing of their personal information, and covered businesses must provide an appropriate way to exercise that right.