CCPA (California Consumer Privacy Act)
California's landmark privacy law giving consumers rights over their personal information, including the right to know, delete, and opt-out of data sales.
The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), is the most comprehensive state privacy law in the United States. It applies to for-profit businesses that collect California residents' personal information and meet certain thresholds: annual gross revenue over $25 million, buying/selling/sharing personal information of 100,000+ consumers, or deriving 50%+ of revenue from selling personal information. The law grants consumers the right to know what personal information is collected, the right to delete, the right to opt-out of sale/sharing, the right to correct, and the right to limit use of sensitive personal information. Enforcement is handled by the California Attorney General and the California Privacy Protection Agency (CPPA).