CalOPPA (California Online Privacy Protection Act)
Definition
California's law requiring operators of commercial websites or online services that collect personal information from California residents to conspicuously post a privacy policy. Enacted in 2003, CalOPPA was groundbreaking as the first state law mandating online privacy policies. It requires the policy to identify information categories collected, sharing practices with third parties, a process for users to review and request changes to their information, the effective date, and how users will be notified of policy changes. The policy must be conspicuously posted and accessible through a hyperlink that includes the word 'privacy.' While CCPA now provides more comprehensive requirements, CalOPPA still applies and remains relevant. Many websites adopted privacy policies initially to comply with CalOPPA, establishing it as the foundation of modern website privacy disclosures.
Applicable Laws & Regulations
- 1California Business and Professions Code Section 22575-22579 - CalOPPA requirements
- 2California Business and Professions Code Section 22577 - Privacy policy content
- 3California Business and Professions Code Section 22578 - Conspicuous posting requirement