What is CCPA?

The California Consumer Privacy Act (CCPA) is one of the first comprehensive consumer privacy laws adopted at the state level in the United States. Enacted in 2018 and effective as of January 1, 2020, the CCPA regulates how the personal information of California residents is collected, used, disclosed, shared, and sold.

Key Consumer Rights Under the CCPA

The CCPA grants California consumers the following key rights over their personal data:

• Know your data: View what personal information is collected about you, why it is used, and with whom it is shared.

• Request deletion: Ask a business to delete the personal information it holds about you, subject to certain legal exceptions.

• Reject sale and sharing: Object to the sale of your personal information or its sharing with third parties.

• Non-discrimination: Do not face different pricing, lower service quality, or unfair treatment for exercising your privacy rights.

Who Must Comply with the CCPA?

The CCPA applies to certain for-profit businesses that do business in California, collect personal information from California residents, and determine how that information is processed. A business falls under the scope of the CCPA if it meets at least one of the following thresholds:

• Annual gross revenue: Annual gross revenue of more than $25 million

• Data processing volume: The business buys, sells, or shares the personal information of 100,000 or more California consumers or households in a year.

• Revenue from data sales or sharing: The business earns 50% or more of its annual revenue from selling or sharing California consumers’ personal information.