Legal

CCPA

The California Consumer Privacy Act — a US state law giving California residents control over their personal information.

The California Consumer Privacy Act (CCPA) is a state privacy law that grants California residents rights over their personal information and imposes obligations on businesses that collect it.

Key Consumer Rights

  • Right to know what personal information is collected, used, and shared
  • Right to delete personal information held by businesses
  • Right to opt out of the sale or sharing of personal information
  • Right to non-discrimination for exercising privacy rights
  • Right to correct inaccurate personal information (added by CPRA)

Who Must Comply?

Businesses that meet any of these thresholds:

  • Annual gross revenue over $25 million
  • Buy, sell, or share the personal information of 100,000+ consumers or households
  • Derive 50%+ of annual revenue from selling or sharing personal information

Comparison with GDPR

CCPAGDPR
ScopeCalifornia residentsEU/EEA residents
Consent modelOpt-out (for sales)Opt-in
FinesUp to $7,500 per violationUp to 4% global turnover

Related Terms

Personal DataPrivacy

Any information that can identify a living individual, directly or indirectly.

GDPRLegal

The General Data Protection Regulation — the EU's comprehensive data protection law, effective since May 2018.

CPRALegal

The California Privacy Rights Act — an amendment to the CCPA that expanded consumer rights and created the California Privacy Protection Agency.

Privacy PolicyCompliance

A public document that explains how an organisation collects, uses, stores, and shares personal data.

CPRA