California Consumer Privacy Act

California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA) is a state statute intended to enhance privacy rights and consumer protection for residents of California, United States. The CCPA was enacted on June 28, 2018, and became effective on January 1, 2020. It is considered one of the most comprehensive privacy laws in the United States.

Background

The CCPA was introduced in response to growing concerns about privacy and data protection in the digital age. It was influenced by the General Data Protection Regulation (GDPR) of the European Union, which set a high standard for data privacy and protection.

Key Provisions

The CCPA grants California residents several rights regarding their personal information:

• Right to Know: Consumers have the right to know what personal data is being collected about them, the purpose of collection, and with whom it is being shared.
• Right to Delete: Consumers can request the deletion of their personal information held by businesses.
• Right to Opt-Out: Consumers have the right to opt-out of the sale of their personal information.
• Right to Non-Discrimination: Businesses cannot discriminate against consumers who exercise their rights under the CCPA.

Applicability

The CCPA applies to for-profit businesses that do business in California and meet any of the following criteria:

• Have annual gross revenues in excess of $25 million.
• Buy, receive, or sell the personal information of 50,000 or more consumers, households, or devices.
• Derive 50% or more of their annual revenues from selling consumers' personal information.

Enforcement

The CCPA is enforced by the California Attorney General. Businesses that violate the CCPA may face civil penalties, and consumers have the right to take legal action in the event of data breaches.

Amendments and Updates

Since its enactment, the CCPA has been subject to amendments to clarify and refine its provisions. Notably, the California Privacy Rights Act (CPRA), passed in November 2020, expands and modifies the CCPA, with most provisions taking effect on January 1, 2023.

Impact

The CCPA has had a significant impact on how businesses handle personal data, prompting many to update their privacy policies and data management practices. It has also influenced privacy legislation in other states and at the federal level.

See Also

• General Data Protection Regulation
• California Privacy Rights Act
• Data Protection

References

• California Consumer Privacy Act - Office of the Attorney General
• California Consumer Privacy Act - Legislative Information