CCPA (California Consumer Privacy Act)

A comprehensive California privacy law enacted in 2018 and effective January 2020 that grants California residents significant rights over their personal information. CCPA applies to for-profit businesses meeting specified thresholds that collect California residents' personal information. It establishes rights to know what personal information is collected, to delete personal information, to opt-out of the sale of personal information, and to non-discrimination for exercising rights. CCPA created a new privacy paradigm in the United States, inspiring numerous state privacy laws. The law requires businesses to provide privacy notices, honor consumer requests within specified timeframes, implement reasonable security measures, and maintain records of data practices. CPRA substantially amended CCPA in 2020, creating additional rights and establishing the California Privacy Protection Agency. CCPA marked a watershed moment for U.S. privacy regulation.