What is CCPA compliance?

CCPA compliance means following the California Consumer Privacy Act’s requirements for collecting, using, storing, selling and sharing the personal information of California residents.

Businesses subject to the CCPA must inform consumers at or before collecting their personal information. The notice should clearly state:

• The categories of personal information, including sensitive personal information, collected

• The purposes for which the personal information is collected or used

• Whether the personal information is sold or shared

• The retention period for each category of personal information, or the criteria used to determine it

• If personal information is sold or shared, a link to the Notice of Right to Opt Out of Sale or Sharing

• A link to the business’s privacy policy

Consumers may have the right to access, correct or delete their personal information, opt out of its sale or sharing, and limit certain uses of sensitive personal information. Businesses must provide an accessible privacy policy, respond to valid requests, respect applicable opt-out preference signals such as Global Privacy Control, and avoid discriminating against consumers who exercise their rights.

CCPA compliance requires these principles to be applied to the business’s actual data practices. A privacy policy or cookie banner alone is not sufficient.