{"id":330,"date":"2024-09-19T09:24:00","date_gmt":"2024-09-19T07:24:00","guid":{"rendered":"https:\/\/stage.usercentrics.com\/?post_type=knowledge&#038;p=12018"},"modified":"2026-03-27T16:17:47","modified_gmt":"2026-03-27T15:17:47","slug":"california-consumer-privacy-act","status":"publish","type":"knowledge","link":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/","title":{"rendered":"California Consumer Privacy Act (CCPA) \u2013 an overview"},"content":{"rendered":"\n<p>The California Consumer Privacy Act (CCPA) is the first and most influential consumer privacy law passed in the U.S. Since coming into effect in 2020, it has been influential on subsequent privacy legislation in other states.<\/p>\n\n\n\n<p>Navigating the CCPA\u2019s requirements can be complex. It does or will intersect with a variety of other California laws passed since, like the California Age-Appropriate Design Code Act, California Delete Act, and California Opt-Out Preference Signal \/ Opt Me Out Act, as well as federal regulations like the <a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/health-insurance-portability-and-accountability-act-hipaa\/\">Health Insurance Portability and Accountability Act (HIPAA)<\/a> and the <a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/childrens-online-protection-act-coppa\/\">Children\u2019s Online Privacy Protection Act (COPPA)<\/a>.\u00a0<\/p>\n\n\n\n<p>However, the CCPA has its own unique guidelines that you need to be aware of if you do business in California and meet the compliance thresholds.<\/p>\n\n\n\n<p>In this article, we explore the CCPA\u2019s obligations for businesses, including all 2025 updates. We unpack when the law applies, what it means in practice, and best practices to achieve and maintain compliance.<\/p>\n\n\n<div class=\"uc-key-takeaways\">\n    <div class=\"uc-key-takeaways__container\">\n        <h2 class=\"uc-key-takeaways__title uc-key-takeaways__heading-variarion like-h3\">\n            At a glance        <\/h2>\n        <div class=\"uc-key-takeaways__content\">\n            <div class=\"uc-key-takeaways__content__inner\">\n                <div class=\"uc-accordion-item uc-accordion-item--opened\">\n    <span class=\"uc-accordion-item__title no-default-margin\">    <button class=\"uc-accordion-item__button\"\n            aria-expanded=\"true\"\n            tabindex=\"0\"\n            aria-label=\"Toggle accordion item\">\n        Key Takeaways    <\/button>\n    <\/span>    <div class=\"uc-accordion-item__content\">\n        <div class=\"uc-accordion-item__content__inner\">\n            \n\n<ul class=\"wp-block-list\">\n<li>The CCPA, as amended by the CPRA, regulates how certain for-profit businesses collect, use, share, and sell Californians\u2019 personal information.<\/li>\n\n\n\n<li>The CCPA covers personal information linked to a consumer or household and provides additional protections for sensitive personal information.<\/li>\n\n\n\n<li>The law follows an opt-out model for adults, requires opt-in for minors under 16, and mandates clear opt-out and limitation mechanisms.<\/li>\n\n\n\n<li>Businesses must provide a notice at collection, a clear privacy policy, and honor consumer rights requests.<\/li>\n\n\n\n<li>New regulations phased in from 2026 to 2028 add requirements for automated decision-making disclosures, cybersecurity audits, and risk assessments.<\/li>\n<\/ul>\n\n        <\/div>\n    <\/div>\n<\/div>\n\n            <\/div>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-is-the-california-consumer-privacy-act-ccpa\">What is the California Consumer Privacy Act (CCPA)?<\/h2>\n\n\n\n<p>The California Consumer Privacy Act (CCPA) is a <a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/us-data-privacy-laws-by-state\/\">U.S. state-level consumer privacy law<\/a> that was passed in 2018 and came into effect on January 1, 2020. It applies exclusively to California residents, known as \u201dconsumers\u201d under the law, and regulates the protection of their personal information.\u00a0<\/p>\n\n\n\n<p>Under the CCPA, a resident is any individual:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Who is in the State for other than a temporary or transitory purpose<\/li>\n\n\n\n<li>Who is domiciled in the state and outside the state for a temporary or transitory purpose<\/li>\n<\/ul>\n\n\n\n<p>Although the CCPA is a state law, it has a considerable influence. This is largely due to California being both the most populous U.S. state, with almost 40 million residents, the world\u2019s fifth-largest economy, and the headquarters for many global tech companies.&nbsp;<\/p>\n\n\n\n<p>The CCPA was amended and expanded by the <a href=\"https:\/\/usercentrics.com\/us\/cpra\/\">California Privacy Rights Act (CPRA)<\/a>, which took effect on January 1, 2023. It granted additional rights to consumers and established the <a href=\"https:\/\/cppa.ca.gov\/\" target=\"_blank\" rel=\"noreferrer noopener\">California Privacy Protection Agency (CPPA, also known as CalPrivacy)<\/a>, among other things.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-s-new-to-the-ccpa-2025-updates\">What\u2019s new to the CCPA? 2025 updates<\/h2>\n\n\n\n<p>In July 2025, the CPPA voted to <a href=\"https:\/\/cppa.ca.gov\/regulations\/ccpa_updates.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">adopt new regulations<\/a> to update existing regulations and add more requirements for businesses. Implementation will be staggered over two years, starting in January 2026 and ending in April 2028.<\/p>\n\n\n\n<p>Here\u2019s what you need to be aware of.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-automated-decision-making-technology-admt\">Automated Decision-Making Technology (ADMT)<\/h3>\n\n\n\n<p>Effective from January 1 2027, you are required to provide a clear disclosure before using ADMT to make a significant decision about a consumer. You must include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The fact you\u2019re using ADMT<\/li>\n\n\n\n<li>How the ADMT works<\/li>\n\n\n\n<li>The reasons why ADMT is being used<\/li>\n\n\n\n<li>Consumers\u2019 rights regarding ADMT use under the CCPA<\/li>\n<\/ul>\n\n\n\n<p>You must also give consumers the ability to opt out of ADMT and appeal any decisions made by the technology. As part of your ongoing responsibilities, you must keep detailed records of notices, consumer preferences, and decisions.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cybersecurity-audits\">Cybersecurity audits<\/h3>\n\n\n\n<p>The CCPA states that any business whose data processing activities pose a significant risk to consumers must conduct an annual cybersecurity audit. The regulations clarify that \u201csignificant risk\u201d entails processing either:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Personal data of 250,000 or more consumers<\/li>\n\n\n\n<li>Sensitive personal data of 50,000 or more consumers<\/li>\n<\/ul>\n\n\n\n<p>A professional must conduct these annual audits using recognized standards. They should evaluate how well your cybersecurity program protects consumers from threats using measures like access controls, encryption, and vulnerability scanning.&nbsp;<\/p>\n\n\n\n<p>Afterward, they must issue a report describing any potential issues and the steps your business will take to address them.<\/p>\n\n\n\n<p>Effective dates for this rule are based on your gross annual revenue:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Over USD 100 million: April 1, 2028<\/li>\n\n\n\n<li>USD 50\u2013100 million: April 1, 2029<\/li>\n\n\n\n<li>Under USD 50 million: April 1, 2030<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-risk-assessments\">Risk assessments<\/h3>\n\n\n\n<p>The new rules state that you must conduct an assessment before initiating any high-risk data practices as of April 1, 2028. A data processing activity counts as a high risk when it involves either:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Selling or sharing of personal information<\/li>\n\n\n\n<li>Collection, use, or storage of sensitive personal information<\/li>\n<\/ul>\n\n\n\n<p>Risk assessments must weigh the proposed benefits to consumers of the data processing activity against the potential risks. You can\u2019t frame the benefits in generic terms, such as \u2018to improve our service\u2019.<\/p>\n\n\n\n<p>In addition to conducting these assessments before new initiatives, you must be able to submit them to the CPPA or the Attorney General upon request.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-insurance-company-clarifications\">Insurance company clarifications<\/h3>\n\n\n\n<p>The updates to the CCPA also clarified when insurance companies must comply with the CCPA.&nbsp;<\/p>\n\n\n\n<p id=\"h-\">Any personal information collected by insurance companies outside of an insurance transaction is subject to CCPA requirements, given that the insurer meets one of the CCPA\u2019s thresholds. Personal information collected within the scope of an insurance transaction is subject to compliance with the <a href=\"https:\/\/www.insurance.ca.gov\/01-consumers\/130-laws-regs-hearings\/01-CIC\/\" target=\"_blank\" rel=\"noreferrer noopener\">California Insurance Code (CIC)<\/a>.\u00a0<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-definitions-under-the-california-consumer-privacy-act-ccpa-data-privacy-law\">Definitions under the California Consumer Privacy Act (CCPA) data privacy law<\/h2>\n\n\n\n<p>The CCPA defines several terms that cover the information it protects and data processing activities.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-personal-information\">Personal information<\/h3>\n\n\n\n<p>The CCPA\/CPRA law defines personal information as <em>\u201cinformation that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.\u201d<\/em><\/p>\n\n\n\n<p>Here are examples of information that could identify individuals under the law:<\/p>\n\n\n\n<div class=\"uc-article-list-timeline uc-article-list-timeline--empty-header uc-article-list-timeline--no-image uc-ctx--base\" style=\"\">\n        <div class=\"uc-article-list-timeline__list\">\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Names or nicknames                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Postal address                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Contact details                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Purchase and browsing history                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Location data                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Employment and professional data                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n            <\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-sensitive-personal-information\">Sensitive personal information<\/h3>\n\n\n\n<p>Sensitive personal information is any private data that could lead to harm, such as discrimination or identity theft, if exposed. The CCPA defines it as any details that reveal a consumer\u2019s:<\/p>\n\n\n\n<div class=\"uc-article-list-timeline uc-article-list-timeline--empty-header uc-article-list-timeline--no-image uc-ctx--base\" style=\"\">\n        <div class=\"uc-article-list-timeline__list\">\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Government ID or numbers                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Credentials for personal or financial log-in accounts                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Precise geolocation                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Race or ethnic origin                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Immigration status                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Religious or philosophical beliefs                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Contents of private messages                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Genetic data                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n            <\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-unique-identifier\">Unique identifier<\/h3>\n\n\n\n<p>The CCPA\/CPRA law defines a unique identifier or \u201cunique personal identifier\u201d as <em>\u201ca persistent identifier that can be used to recognize a consumer, a family, or a device that is linked to a consumer or family, over time and across different services.\u201d<\/em><\/p>\n\n\n\n<p>The law specifies that a family means a parent or guardian and any children under 18 years of age who are in their custody.<\/p>\n\n\n\n<p>Examples of unique identifiers are:<\/p>\n\n\n\n<div class=\"uc-article-list-timeline uc-article-list-timeline--empty-header uc-article-list-timeline--no-image uc-ctx--base\" style=\"\">\n        <div class=\"uc-article-list-timeline__list\">\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Device identifier                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        IP address                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Cookies, beacons, pixel tags, mobile ad identifiers, or similar technology                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Customer number, unique pseudonym, or user alias                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n            <\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-consent\">Consent<\/h3>\n\n\n\n<p>The law defines consent as <em>\u201cany freely given, specific, informed, and unambiguous indication of the consumer\u2019s wishes by which the consumer, or the consumer\u2019s legal guardian, a person who has power of attorney, or a person acting as a conservator for the consumer, including by a statement or by a clear affirmative action, signifies agreement to the processing of personal information relating to the consumer for a narrowly defined particular purpose.\u201c<\/em><\/p>\n\n\n\n<p>The following does not constitute valid consent under the CCPA\/CPRA:<\/p>\n\n\n\n<div class=\"uc-article-list-timeline uc-article-list-timeline--empty-header uc-article-list-timeline--no-image uc-ctx--base\" style=\"\">\n        <div class=\"uc-article-list-timeline__list\">\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Acceptance of general or broad terms of use                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Acceptance of a similar data practice                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Hovering over, muting, pausing, or closing a piece of content                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Consent obtained through dark patterns                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n            <\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-sale\">Sale<\/h3>\n\n\n\n<p>The law defines sale as <em>\u201cselling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer\u2019s personal information by the business to a third party for monetary or other valuable consideration.\u201d<\/em><\/p>\n\n\n\n<p>The following activities are not considered to be sales under the CCPA:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A consumer uses or directs the business to intentionally disclose or interact with third parties&nbsp;<\/li>\n\n\n\n<li>The business uses or shares an identifier for the purpose of informing others that the consumer has opted out of the sale of or limited the use of their personal information<\/li>\n\n\n\n<li>The business transfers personal information to a third party as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the third party assumes control of all or part of the business<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-who-must-comply-with-the-california-consumer-privacy-act-ccpa\">Who must comply with the California Consumer Privacy Act (CCPA)?<\/h2>\n\n\n\n<p>The CCPA applies to for-profit businesses that operate in California and collect the personal information of the state\u2019s residents, if they meet any one of the <a href=\"https:\/\/cppa.ca.gov\/regulations\/cpi_adjustment.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">following thresholds<\/a>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Have a gross annual, global revenue exceeding USD 25 million for the previous calendar year (adjusted to the Consumer Price Index)<\/li>\n\n\n\n<li>Receive, buy, sell, or share personal information of 100,000 or more consumers or households<\/li>\n\n\n\n<li>Earn more than half of their annual revenue from the sale of California residents\u2019 personal information<\/li>\n<\/ul>\n\n\n\n<p>All companies that meet one of these thresholds must meet CCPA obligations if they are doing business with California residents, regardless of where in the world they are based.&nbsp;<\/p>\n\n\n<div class=\"uc-notice\">\n    <div class=\"uc-notice__icon\">\n        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M10.8177 17.0093H12.8177V11.0093H10.8177V17.0093ZM11.8177 9.00928C12.1011 9.00928 12.3386 8.91344 12.5302 8.72178C12.7219 8.53011 12.8177 8.29261 12.8177 8.00928C12.8177 7.72594 12.7219 7.48844 12.5302 7.29678C12.3386 7.10511 12.1011 7.00928 11.8177 7.00928C11.5344 7.00928 11.2969 7.10511 11.1052 7.29678C10.9136 7.48844 10.8177 7.72594 10.8177 8.00928C10.8177 8.29261 10.9136 8.53011 11.1052 8.72178C11.2969 8.91344 11.5344 9.00928 11.8177 9.00928ZM11.8177 22.0093C10.4344 22.0093 9.13442 21.7468 7.91775 21.2218C6.70108 20.6968 5.64275 19.9843 4.74275 19.0843C3.84275 18.1843 3.13025 17.1259 2.60525 15.9093C2.08025 14.6926 1.81775 13.3926 1.81775 12.0093C1.81775 10.6259 2.08025 9.32594 2.60525 8.10928C3.13025 6.89261 3.84275 5.83428 4.74275 4.93428C5.64275 4.03428 6.70108 3.32178 7.91775 2.79678C9.13442 2.27178 10.4344 2.00928 11.8177 2.00928C13.2011 2.00928 14.5011 2.27178 15.7177 2.79678C16.9344 3.32178 17.9928 4.03428 18.8927 4.93428C19.7927 5.83428 20.5052 6.89261 21.0302 8.10928C21.5552 9.32594 21.8177 10.6259 21.8177 12.0093C21.8177 13.3926 21.5552 14.6926 21.0302 15.9093C20.5052 17.1259 19.7927 18.1843 18.8927 19.0843C17.9928 19.9843 16.9344 20.6968 15.7177 21.2218C14.5011 21.7468 13.2011 22.0093 11.8177 22.0093Z\" fill=\"black\"\/>\n<\/svg>\n    <\/div>\n    <div class=\"uc-notice__content\">\n                <p><b>Keep in mind: <\/b><span style=\"font-weight: 400;\">Other U.S. privacy laws, like the <\/span><a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/virginia-consumer-data-protection-act-vcdpa\/\"><span style=\"font-weight: 400;\">Virginia Consumer Data Protection Act (VCDPA)<\/span><\/a><span style=\"font-weight: 400;\">, have moved away from revenue-only thresholds. Always check the individual compliance requirements for each state when determining your eligibility.<\/span><\/p>\n            <\/div>\n<\/div>\n\n\n\n\n<div id=\"uc-cta_69e7956a102a8\" class=\"uc-cta uc-cta--primary uc-ctx--blue\">\n    <div class=\"uc-cta__inner container\">\n        <div class=\"uc-cta__content\">\n                                                                                            <\/div>\n                            <div class=\"uc-cta__section\">\n                                                                            <\/div>\n            <\/div>\n<\/div>\n    <script type=\"module\">\n        new Uc_Cta(document.getElementById(\"uc-cta_69e7956a102a8\"));\n    <\/script>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-are-consumers-rights-under-the-california-consumer-privacy-act-ccpa-laws\">What are consumers\u2019 rights under the California Consumer Privacy Act (CCPA) laws?<\/h2>\n\n\n\n<p>The CCPA grants consumers rights that enable them to protect their personal information and control how it\u2019s used. Additional rights were added when the CPRA came into effect.<\/p>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:1;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"48\" height=\"48\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/03-Right-to-know-and-access-IconCard.svg?v=a0172372a2fc4ac5\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right to access<\/div>\n\n    <div class=\"uc-icon-number__description\"><p>Personal information collected before the CPRA\u2019s look-back period (the 12 months prior to January 1, 2023) as long as it\u2019s possible or not unreasonably difficult to provide<\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" style=\"margin-top:var(--wp--preset--spacing--xl);margin-bottom:var(--wp--preset--spacing--xl)\"\/>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:2;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"48\" height=\"48\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/04-Right-to-opt-out-IconCard.svg?v=a46d8e40050accb6\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right to opt out<\/div>\n\n    <div class=\"uc-icon-number__description\"><p><span style=\"font-weight: 400;\">Of the sharing and sale of personal information to third parties<\/span><\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" style=\"margin-top:var(--wp--preset--spacing--xl);margin-bottom:var(--wp--preset--spacing--xl)\"\/>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:3;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"48\" height=\"48\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/01-Right-to-delete-IconCard.svg?v=f21b85faec9413f1\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right to delete<\/div>\n\n    <div class=\"uc-icon-number__description\"><p><span style=\"font-weight: 400;\">Any personal data the controller and third parties have about or from the consumer, with some exceptions<\/span><\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" style=\"margin-top:var(--wp--preset--spacing--xl);margin-bottom:var(--wp--preset--spacing--xl)\"\/>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:4;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/09-Right-to-portability.svg?v=e3c5bd252d024d72\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right to portability<\/div>\n\n    <div class=\"uc-icon-number__description\"><p><span style=\"font-weight: 400;\">Obtain a copy of the consumer\u2019s personal data that the consumer previously provided to the controller, in a readily usable format, with some exceptions<\/span><\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" style=\"margin-top:var(--wp--preset--spacing--xl);margin-bottom:var(--wp--preset--spacing--xl)\"\/>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:5;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"48\" height=\"48\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/02-Right-to-correct-IconCard.svg?v=75904c20c8ef783c\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right to correction<\/div>\n\n    <div class=\"uc-icon-number__description\"><p><span style=\"font-weight: 400;\">A<\/span><span style=\"font-weight: 400;\">ny inaccurate or outdated information the controller has that was provided by the consumer<\/span><\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" style=\"margin-top:var(--wp--preset--spacing--xl);margin-bottom:var(--wp--preset--spacing--xl)\"\/>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:6;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"48\" height=\"48\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/05-Right-to-limit-IconCard.svg?v=c329f27723b52ef8\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right to restrict sensitive personal information<\/div>\n\n    <div class=\"uc-icon-number__description\"><p>T<span style=\"font-weight: 400;\">o limit access to and use of data categorized as sensitive<\/span><\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" style=\"margin-top:var(--wp--preset--spacing--xl);margin-bottom:var(--wp--preset--spacing--xl)\"\/>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:7;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/08-Right-for-minors-personal-information-not-to-be-shared-or-sold-without-explicit-consent.svg?v=d125bf0f8de651a4\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right for minors\u2019 personal information not to be shared or sold without explicit consent<\/div>\n\n    <div class=\"uc-icon-number__description\"><p><span style=\"font-weight: 400;\">And for them not to be asked for consent within 12 months of declining a company\u2019s consent request<\/span><\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" style=\"margin-top:var(--wp--preset--spacing--xl);margin-bottom:var(--wp--preset--spacing--xl)\"\/>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:8;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/07-Right-to-access-information-about-automated-decision-making.svg?v=934cf73bcd6b8dfe\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right to access information about automated decision-making<\/div>\n\n    <div class=\"uc-icon-number__description\"><p><span style=\"font-weight: 400;\">To request information about automated decision-making and the likely outcomes of using such processes, specifically with regards to profiling<\/span><\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" style=\"margin-top:var(--wp--preset--spacing--xl);margin-bottom:var(--wp--preset--spacing--xl)\"\/>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:9;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"48\" height=\"48\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/04-Right-to-opt-out-IconCard.svg?v=a46d8e40050accb6\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right to opt-out of automated decision-making technology<\/div>\n\n    <div class=\"uc-icon-number__description\"><p><span style=\"font-weight: 400;\">Regarding the use of automated decision-making technology with regard to personal information<\/span><\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" style=\"margin-top:var(--wp--preset--spacing--xl);margin-bottom:var(--wp--preset--spacing--xl)\"\/>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: 0px; --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:10;\">\n    \n<div class=\"uc-icon-number uc-icon-number--size-default\"><div class=\"uc-icon-number__icon uc-icon-number__icon--type-image\">\n                        <img decoding=\"async\" width=\"48\" height=\"48\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/06-Right-to-nondiscrimination-IconCard.svg?v=ac261157a001da79\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" aria-hidden=\"true\" \/>            <\/div>\n    <div class=\"uc-icon-number__title\">Right not to be discriminated against<\/div>\n\n    <div class=\"uc-icon-number__description\"><p><span style=\"font-weight: 400;\">Controllers cannot unlawfully discriminate against consumers, including for exercising their rights<\/span><\/p>\n<\/div>\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n<h2 class=\"wp-block-heading\" id=\"h-obligations-under-the-california-consumer-privacy-act-ccpa-rules\">Obligations under the California Consumer Privacy Act (CCPA) rules<\/h2>\n\n\n\n<p>Businesses have specific CCPA\/CPRA obligations. These aim to protect California residents\u2019 personal information by ensuring transparency and accountability in data handling practices.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-notices-required-under-the-ccpa-cpra\">Notices required under the CCPA\/CPRA<\/h3>\n\n\n\n<p>The CCPA\/CPRA requires businesses to provide two distinct notices to consumers: a notice at collection and a <a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/what-is-a-privacy-policy-and-why-do-you-need-one\/\">privacy policy<\/a>.<\/p>\n\n\n\n<p>You must display a notice at collection before you collect or use a California consumer\u2019s personal information. This must clearly list:<\/p>\n\n\n\n<div class=\"uc-article-list-timeline uc-article-list-timeline--empty-header uc-article-list-timeline--no-image uc-ctx--base\" style=\"\">\n        <div class=\"uc-article-list-timeline__list\">\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Categories of personal information collected                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Purposes for which the information will be used                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Whether you will share or sell personal information                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        How long you retain this data                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Whether the business sells or shares personal information                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n            <\/div>\n<\/div>\n\n\n\n<p>The notice at collection should contain a link to your privacy policy and include a link with the specific words \u201c<a href=\"https:\/\/usercentrics.com\/us\/guides\/website-disclaimers\/do-not-sell-my-personal-information\/\">Do Not Sell or Share My Personal Information<\/a>\u201d, which enables consumers to easily opt out of such activities.\u00a0<\/p>\n\n\n\n<p>A CCPA privacy policy must include:<\/p>\n\n\n\n<div class=\"uc-article-list-timeline uc-article-list-timeline--empty-header uc-article-list-timeline--no-image uc-ctx--base\" style=\"\">\n        <div class=\"uc-article-list-timeline__list\">\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        A description of consumers\u2019 privacy rights and how to exercise them                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Categories of personal information collected, sold, or shared in the preceding 12 months                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Categories of sources from which personal information is collected                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Business or commercial purpose for collecting, selling, or sharing personal information                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Categories of third parties to whom personal information is disclosed                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Links to any online request forms or portals you offer                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        An explanation of how your business verifies requests                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        A contact method for any questions or concerns                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        The date you last updated your privacy policy                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n            <\/div>\n<\/div>\n\n\n\n<p>Make your privacy policy easily accessible on your websites. For example, include a link at the footer of every page so that consumers can easily find and review it.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-consent-requirements-under-the-ccpa-cpra\">Consent requirements under the CCPA\/CPRA<\/h3>\n\n\n\n<p>In most cases, the CCPA\/CPRA doesn\u2019t require you to obtain explicit consent from consumers to process their personal information, though they do have the right to opt out of specific uses at any time. California privacy laws operate on an opt-out model where you assume consumers have consented unless they indicate otherwise.&nbsp;<\/p>\n\n\n\n<p>There is an exception for personal information belonging to minors:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Aged 13 to 16<\/strong>: You must obtain explicit, opt-in consent from a minor before selling or sharing their personal information<\/li>\n\n\n\n<li><strong>Under 13:<\/strong> You must obtain explicit consent from a parent or guardian before collecting or selling a minor\u2019s personal information<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-opt-out-requests-under-the-ccpa-cpra\">Opt-out requests under the CCPA\/CPRA<\/h3>\n\n\n\n<p>You must provide options for consumers to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Opt out of the sale or sharing of their personal information, as well as targeted advertising and profiling<\/li>\n\n\n\n<li>Limit the use or disclosure of their sensitive personal information for unauthorized purposes<\/li>\n<\/ul>\n\n\n\n<p>The law mandates specific ways to provide consumers with opt-out options.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>A clear and conspicuous link on your homepage titled \u201cDo Not Sell or Share My Personal Information\u201d that directs consumers to a page where they can opt out of the sale or sharing of their personal information.<\/li>\n\n\n\n<li>A clear and conspicuous link titled \u201cLimit the Use of My Sensitive Personal Information,\u201d which enables consumers to limit the use or disclosure of their sensitive personal information.<\/li>\n<\/ol>\n\n\n\n<p>Alternatively, you can provide a single link that combines both functions and enables consumers to opt out of the relevant uses and disclosures of their personal information.<\/p>\n\n\n\n<p>You must also respect universal opt-out mechanisms, such as <a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/what-is-global-privacy-control\/\">Global Privacy Control (GPC)<\/a> signals, through which consumers can set their consent preferences once and communicate them automatically across various websites and online services.<\/p>\n\n\n\n<p>Under the <a href=\"https:\/\/cppa.ca.gov\/announcements\/2025\/20251008_2.html\" target=\"_blank\" rel=\"noreferrer noopener\">California Opt Me Out Act<\/a>, effective from January 2027, browsers used in California must include a setting that enables consumers to send an opt-out preference signal (OOPS) to websites, which must be honored.<\/p>\n\n\n\n<p>This Act, which supplements the CCPA, also requires browser developers to make clear to consumers how the opt-out preference signal works and the intended effect of the opt-out preference signal.<\/p>\n\n\n<div id=\"uc-cta_69e7956a200e9\" class=\"uc-cta uc-cta--button uc-cta--size-full uc-cta--primary uc-ctx--blue\">\n    <div class=\"uc-cta__inner container\">\n        <div class=\"uc-cta__content\">\n                                        <div class=\"uc-cta__heading no-default-margin\">Are you selling or sharing personal information under the CCPA?<\/div>\n                                        <div class=\"uc-cta__description\">\n                    <p>Understand how California law defines \u201csale\u201d and \u201csharing,\u201d and whether your data practices trigger opt-out obligations.<\/p>\n                <\/div>\n                                                                    <\/div>\n                            <div class=\"uc-cta__section\">\n                                        <a id=\"ba358ee0-ced9-43e2-837f-9e5d01fe606e\" class=\"uc-button uc-button-size-m uc-button-contained  no-default-link-decoration\" href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/data-is-the-new-gold-how-and-why-it-is-collected-and-sold\/\" target=\"\"><span>Review the guide<\/span><\/a>                                    <\/div>\n            <\/div>\n<\/div>\n    <script type=\"module\">\n        new Uc_Cta(document.getElementById(\"uc-cta_69e7956a200e9\"));\n    <\/script>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-consumer-requests-for-right-to-know-correct-and-delete\">Consumer requests for right to know, correct, and delete<\/h3>\n\n\n\n<p>As we mentioned above, consumers have the right to request information about the personal data collected about them, as well as to correct inaccuracies or to delete that data.<\/p>\n\n\n\n<p>The law requires businesses to provide at least two designated methods for consumers to submit requests, like a toll-free number and a website form. But if you operate exclusively online, you only need to provide an email address. If you have a website, you must enable consumers to submit requests directly through the site.&nbsp;<\/p>\n\n\n\n<p>Consumers can request data that was collected up to 12 months prior to the date of their request. Businesses have 45 days from the date of the request to disclose the requested information, and they may seek an extension of an additional 45 days under certain circumstances.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-contracts-under-the-ccpa-cpra\">Contracts under the CCPA\/CPRA<\/h3>\n\n\n\n<p>Businesses that collect consumers\u2019 personal information sometimes share this data with a third party, such as an advertising network or data analytics provider.&nbsp;<\/p>\n\n\n\n<p>The CCPA\/CPRA requires you to establish third-party agreements with the following requirements:<\/p>\n\n\n\n<div class=\"uc-article-list-timeline uc-article-list-timeline--empty-header uc-article-list-timeline--no-image uc-ctx--base\" style=\"\">\n        <div class=\"uc-article-list-timeline__list\">\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        The personal information is sold, shared, or disclosed only for limited and specific purposes                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        The third party, service provider, or contractor must comply with the CCPA\/CPRA obligations applicable to them                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        The third party, service provider, or contractor must provide the level of data privacy protection required by the law                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        The business is entitled to take \u201creasonable and appropriate steps\u201d to ensure that any third party, service provider, or contractor uses the personal information shared in a way that aligns with the business\u2019s CCPA\/CPRA obligations                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        The third party, service provider, or contractor must inform the business if it cannot meet its legal obligations                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        The business has the right to take reasonable and appropriate steps to stop and remedy any unauthorized use of personal information, after providing notice                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n            <\/div>\n<\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The personal information is sold, shared, or disclosed only for limited and specific purposes.<\/li>\n\n\n\n<li>The third party, service provider, or contractor must comply with the CCPA\/CPRA obligations applicable to them.<\/li>\n\n\n\n<li>The third party, service provider, or contractor must provide the level of data privacy protection required by the law.<\/li>\n\n\n\n<li>The business is entitled to take \u201creasonable and appropriate steps\u201d to ensure that any third party, service provider, or contractor uses the personal information shared in a way that aligns with the business\u2019s CCPA\/CPRA obligations.<\/li>\n\n\n\n<li>The third party, service provider, or contractor must inform the business if it cannot meet its legal obligations.<\/li>\n\n\n\n<li>The business has the right to take reasonable and appropriate steps to stop and remedy any unauthorized use of personal information, after providing notice.<\/li>\n<\/ul>\n\n\n\n<p>Contracts with service providers and contractors must also prohibit them from:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Selling or sharing personal information<\/li>\n\n\n\n<li>Retaining, using, or disclosing personal information for any purpose other than that specified in the contract<\/li>\n\n\n\n<li>Combining the personal information received from the business with personal information received by any other means, except for purposes exempted under the law<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-data-security-under-the-ccpa-cpra\">Data security under the CCPA\/CPRA<\/h3>\n\n\n\n<p>Under the CCPA, you must maintain reasonable security procedures to safeguard personal information from:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Unauthorized or illegal access<\/li>\n\n\n\n<li>Destruction<\/li>\n\n\n\n<li>Unauthorized use<\/li>\n\n\n\n<li>Modification<\/li>\n\n\n\n<li>Disclosure<\/li>\n<\/ul>\n\n\n\n<p>Previously, businesses had more flexibility over how to handle safeguarding. The 2025 updates to the CCPA mean you must now evaluate your cybersecurity program against specific standards and identify any weaknesses in your data protection practices.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-data-minimization-under-the-ccpa-cpra\">Data minimization under the CCPA\/CPRA<\/h3>\n\n\n\n<p>Under the CCPA\/CPRA, businesses can collect, use, store, and share consumers\u2019 personal information only to the extent needed to achieve the original purpose for collecting the information, or for another compatible purpose. The personal information must not be processed in ways that conflict with the original purposes.<\/p>\n\n\n\n<p>This requirement is a key aspect of <a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/data-minimization\/\">data minimization<\/a>, which means that companies must limit their handling of personal data to what is essential for the intended purposes.<\/p>\n\n\n\n<p>The CPPA\u2019s <a href=\"https:\/\/cppa.ca.gov\/pdf\/enfadvisory202401.pdf\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Enforcement Advisory No. 2024-1<\/a> highlighted the principle of data minimization by prohibiting businesses from requiring consumers to share additional information \u201cbeyond what is necessary\u201d.<\/p>\n\n\n\n<p>As part of your risk assessments, you must now provide clear reasons for processing the information you collect. This helps to prove you\u2019re upholding the CCPA principle for data minimization.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-enforcement-and-penalties-under-the-california-consumer-privacy-act-ccpa\">Enforcement and penalties under the California Consumer Privacy Act (CCPA)<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/usercentrics.com\/wp-content\/uploads\/2026\/02\/Enforcement-and-penalties-under-CCPA.svg?v=f19aef6451393dea\" alt=\"\" class=\"wp-image-27180\"\/><\/figure>\n\n\n\n<p>The Attorney General and the CPPA are both responsible for enforcing California\u2019s data privacy laws and applying <a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/ccpa-penalties\/\">CCPA penalties<\/a>. However, the CPPA can\u2019t limit the Attorney General\u2019s authority and must halt proceedings when requested.\u00a0<\/p>\n\n\n\n<p>Violations of the CCPA\/CPRA attract fines of up to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>USD 2,500 per non-intentional violation<\/li>\n\n\n\n<li>USD 7,500 per intentional violation or violation involving minors<\/li>\n<\/ul>\n\n\n\n<p>Like the revenue threshold, fines are adjusted to the Consumer Price Index.<br><br>Under the CCPA, consumers have a private right of action, meaning they can sue businesses in the event of a data breach involving certain categories of personal information or <a href=\"https:\/\/leginfo.legislature.ca.gov\/faces\/codes_displaySection.xhtml?lawCode=CIV&amp;sectionNum=1798.150.\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">personal security information breach<\/a>.&nbsp;<\/p>\n\n\n\n<p>They can do so only when the breach occurred because the business failed to implement reasonable security measures to protect the personal information, resulting in non-encrypted or non-redacted data being stolen.<\/p>\n\n\n\n<p>In order for this condition to apply, the consumer\u2019s first name (or first initial) and last name must have been stolen in combination with at least one of the following:<\/p>\n\n\n\n<div class=\"uc-article-list-timeline uc-article-list-timeline--empty-header uc-article-list-timeline--no-image uc-ctx--base\" style=\"\">\n        <div class=\"uc-article-list-timeline__list\">\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Social Security number                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Driver\u2019s license number, tax identification number, passport number, military identification number, or other unique identification number issued on a government document commonly used to identify a person&#039;s identity                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Financial account number, credit card number, or debit card number if combined with any required security code, access code, or password that would enable account access                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Medical or health insurance information                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n                    <div class=\"uc-article-list-timeline__item\">\n                <div class=\"uc-article-list-timeline__item-graphics \">\n                    <div class=\"uc-article-list-timeline__item-bullet uc-article-list-timeline__item-bullet--icon\">\n                        <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M9.63335 17.838L3.93335 12.138L5.35835 10.713L9.63335 14.988L18.8084 5.81299L20.2334 7.23799L9.63335 17.838Z\" fill=\"black\"\/>\n<\/svg>\n                    <\/div>\n                <\/div>\n\n                <div class=\"uc-article-list-timeline__item-content\">\n                                            <h4 class=\"uc-article-list-timeline__item-title\">                        Fingerprint, retina or iris image, or other unique biometric data used to identify a person&#039;s identity (but not including photographs unless used or stored for facial recognition purposes)                        <\/h4>                                        <div class=\"uc-article-list-timeline__item-description\">\n                                            <\/div>\n                <\/div>\n            <\/div>\n            <\/div>\n<\/div>\n\n\n\n<p>Consumers must give businesses 30 days to cure the violation and ensure no future violations will occur before they can bring legal action against the business.<\/p>\n\n\n\n<p>They can otherwise make a claim:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>To recover damages between USD 100 and USD 750 per incident, or actual damages suffered, whichever is greater<\/li>\n\n\n\n<li>For injunctive or declaratory relief<\/li>\n<\/ul>\n\n\n\n<p>Like the revenue compliance threshold and fines, damages consumers can recover are also adjusted to the Consumer Price Index.<br><br>If a consumer believes that their rights, other than those arising out of a data breach, have been violated, they may file a complaint with the Attorney General or the CPPA.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-does-the-ccpa-cpra-mean-for-your-business\">What does the CCPA\/CPRA mean for your business?<\/h2>\n\n\n\n<p>If your business meets one of the CCPA\/CPRA thresholds and has an online property, it must take several steps to meet its obligations. Here\u2019s a quick <a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/6-steps-website-ccpa-compliant\/\">CCPA compliance checklist<\/a> to get you started on your compliance journey.\u00a0<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span style=\"letter-spacing: -0.2px;\">Your website must present visitors with a notice at collection that lists the categories and purposes of the personal data collected, whether personal information is sold or shared, and how long the business will retain the personal information.&nbsp;<\/span><\/li>\n\n\n\n<li>You must provide a new notice at collection whenever you start to collect additional categories of personal information or intend to use the data for additional purposes.<\/li>\n\n\n\n<li>Your website must include a privacy policy that informs consumers of their privacy rights and how to exercise them, as well as your privacy practices in more detail.<\/li>\n\n\n\n<li>If you sell or share personal data, you must present a link titled \u201cDo Not Sell Or Share My Personal Information\u201d to enable users to opt out of the sale of their personal data.&nbsp;<\/li>\n\n\n\n<li>If you process sensitive data, you must include a link titled \u201cLimit The Use of My Sensitive Personal Information\u201d to enable users to limit the processing of this information to specific purposes.<\/li>\n\n\n\n<li>For personal information of minors, you must obtain explicit consent from the consumer (between 13 and 16 years) or their parent or guardian (when the minor is below 13 years) before their personal information can be shared or sold.<\/li>\n\n\n\n<li>If you meet specific revenue or risk thresholds, you must arrange independent cybersecurity audits to evaluate your system and demonstrate that you can safeguard the personal information you collect from consumers.<\/li>\n\n\n\n<li>If you use Automated Decision-Making Technology, you must provide a pre-use notice and enable consumers to opt out of ADMT (unless you use an approved human review process) or request information about how ADMT impacted them, as well as conduct and submit a risk assessment before using ADMT for significant decisions or processing sensitive personal information for profiling.&nbsp;&nbsp;<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-achieve-ccpa-compliance-with-usercentrics\">Achieve CCPA compliance with Usercentrics<\/h2>\n\n\n\n<p>A <a href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/ccpa-compliance-tools\/\">CCPA compliance tool<\/a> like Usercentrics CMP makes it easier to comply with the California privacy law\u2019s requirements while building trust with consumers.\u00a0<\/p>\n\n\n\n<p>The Usercentrics CMP provides geolocation functionality that detects when a California resident visits your site. It then displays the relevant banner and access to the privacy policy with straightforward links or buttons that enable users to manage their data processing preferences.&nbsp;<\/p>\n\n\n\n<p>The result is automated, straightforward privacy compliance functionality that helps you build trust with customers, maintain the data you need for marketing efforts, and comply with CCPA\/CPRA requirements.&nbsp;<\/p>\n\n\n<div id=\"uc-cta_69e7956a245d7\" class=\"uc-cta uc-cta--button uc-cta--size-full uc-cta--primary uc-ctx--blue\">\n    <div class=\"uc-cta__inner container\">\n        <div class=\"uc-cta__content\">\n                                        <div class=\"uc-cta__heading no-default-margin\">Stay ahead of CCPA and CPRA enforcement<\/div>\n                                        <div class=\"uc-cta__description\">\n                    <p>Automate consent management, honor opt-out signals, and align with evolving California privacy requirements \u2014 without disrupting your marketing strategy.<\/p>\n                <\/div>\n                                                                    <\/div>\n                            <div class=\"uc-cta__section\">\n                                        <a id=\"7a5eea50-f95f-425c-ae50-a9bd165cec78\" class=\"uc-button uc-button-size-m uc-button-contained  no-default-link-decoration\" href=\"https:\/\/usercentrics.com\/us\/ccpa\/\" target=\"\"><span>Explore solution<\/span><\/a>                                    <\/div>\n            <\/div>\n<\/div>\n    <script type=\"module\">\n        new Uc_Cta(document.getElementById(\"uc-cta_69e7956a245d7\"));\n    <\/script>\n\n\n\n<p id=\"h-\"><em>Usercentrics does not provide legal advice, and information is provided for educational purposes only. We always recommend engaging qualified legal counsel or privacy specialists regarding data privacy and protection issues and operations.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In effect since January 1, 2020, the California Consumer Privacy Act (CCPA) was the first US state-level consumer privacy law. It established consumers\u2019 rights, set obligations for businesses, and influenced subsequent privacy regulations in other states.<\/p>\n","protected":false},"featured_media":7549,"template":"","meta":{"_acf_changed":false,"editor_notices":[],"footnotes":""},"tags":[],"magazine_issue":[],"magazine_tag":[],"resource_tag":[14,13],"class_list":["post-330","knowledge","type-knowledge","status-publish","has-post-thumbnail","hentry","resource_tag-privacy","resource_tag-regulations"],"acf":[],"yoast_head":"<title>California Consumer Privacy Act (CCPA): An Overview<\/title>\n<meta name=\"description\" content=\"Our California Consumer Privacy Act (CCPA) summary helps you understand how the California privacy law impacts businesses that collect personal information.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"California Consumer Privacy Act (CCPA): An Overview\" \/>\n<meta property=\"og:description\" content=\"Our California Consumer Privacy Act (CCPA) summary helps you understand how the California privacy law impacts businesses that collect personal information.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/\" \/>\n<meta property=\"og:site_name\" content=\"Usercentrics - US\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/usercentrics\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-27T15:17:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/08\/uc_some_1200x630_ccpa_091824_1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"California Consumer Privacy Act (CCPA) - an overview\" \/>\n<meta name=\"twitter:description\" content=\"The first, and to date, most influential state-level consumer privacy law passed in the US, is the California Consumer Privacy Act (CCPA).\" \/>\n<meta name=\"twitter:site\" content=\"@usercentrics\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/california-consumer-privacy-act\\\/\",\"url\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/california-consumer-privacy-act\\\/\",\"name\":\"California Consumer Privacy Act (CCPA): An Overview\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/california-consumer-privacy-act\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/california-consumer-privacy-act\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/wp-content\\\/uploads\\\/sites\\\/7\\\/2021\\\/08\\\/uc_blog_1000x1000_ccpa.jpg\",\"datePublished\":\"2024-09-19T07:24:00+00:00\",\"dateModified\":\"2026-03-27T15:17:47+00:00\",\"description\":\"Our California Consumer Privacy Act (CCPA) summary helps you understand how the California privacy law impacts businesses that collect personal information.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/california-consumer-privacy-act\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/california-consumer-privacy-act\\\/\"}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/california-consumer-privacy-act\\\/#primaryimage\",\"url\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/wp-content\\\/uploads\\\/sites\\\/7\\\/2021\\\/08\\\/uc_blog_1000x1000_ccpa.jpg\",\"contentUrl\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/wp-content\\\/uploads\\\/sites\\\/7\\\/2021\\\/08\\\/uc_blog_1000x1000_ccpa.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"Golden Gate Bridge\",\"copyrightNotice\":\"\u00a9 Copyright 2026 Usercentrics GmbH\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Usercentrics GmbH\"},\"creditText\":\"Image: Usercentrics GmbH\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/california-consumer-privacy-act\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Resources\",\"item\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/resources\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"California Consumer Privacy Act (CCPA) \u2013 an overview\",\"item\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/knowledge-hub\\\/california-consumer-privacy-act\\\/\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/#website\",\"url\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/\",\"name\":\"Usercentrics - US\",\"description\":\"Consent Management Platform (CMP) Usercentrics\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/usercentrics.com\\\/us\\\/?s={search_term_string}\"}}],\"inLanguage\":\"en-US\"}]}<\/script>","yoast_head_json":{"title":"California Consumer Privacy Act (CCPA): An Overview","description":"Our California Consumer Privacy Act (CCPA) summary helps you understand how the California privacy law impacts businesses that collect personal information.","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"California Consumer Privacy Act (CCPA): An Overview","og_description":"Our California Consumer Privacy Act (CCPA) summary helps you understand how the California privacy law impacts businesses that collect personal information.","og_url":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/","og_site_name":"Usercentrics - US","article_publisher":"https:\/\/www.facebook.com\/usercentrics","article_modified_time":"2026-03-27T15:17:47+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/08\/uc_some_1200x630_ccpa_091824_1.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_title":"California Consumer Privacy Act (CCPA) - an overview","twitter_description":"The first, and to date, most influential state-level consumer privacy law passed in the US, is the California Consumer Privacy Act (CCPA).","twitter_site":"@usercentrics","twitter_misc":{"Est. reading time":"15 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/","url":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/","name":"California Consumer Privacy Act (CCPA): An Overview","isPartOf":{"@id":"https:\/\/usercentrics.com\/us\/#website"},"primaryImageOfPage":{"@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/#primaryimage"},"image":{"@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/#primaryimage"},"thumbnailUrl":"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/08\/uc_blog_1000x1000_ccpa.jpg","datePublished":"2024-09-19T07:24:00+00:00","dateModified":"2026-03-27T15:17:47+00:00","description":"Our California Consumer Privacy Act (CCPA) summary helps you understand how the California privacy law impacts businesses that collect personal information.","breadcrumb":{"@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/"}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/#primaryimage","url":"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/08\/uc_blog_1000x1000_ccpa.jpg","contentUrl":"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/08\/uc_blog_1000x1000_ccpa.jpg","width":1000,"height":1000,"caption":"Golden Gate Bridge","copyrightNotice":"\u00a9 Copyright 2026 Usercentrics GmbH","creator":{"@type":"Organization","name":"Usercentrics GmbH"},"creditText":"Image: Usercentrics GmbH"},{"@type":"BreadcrumbList","@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Resources","item":"https:\/\/usercentrics.com\/us\/resources\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/usercentrics.com\/us\/knowledge-hub\/"},{"@type":"ListItem","position":3,"name":"California Consumer Privacy Act (CCPA) \u2013 an overview","item":"https:\/\/usercentrics.com\/us\/knowledge-hub\/california-consumer-privacy-act\/"}]},{"@type":"WebSite","@id":"https:\/\/usercentrics.com\/us\/#website","url":"https:\/\/usercentrics.com\/us\/","name":"Usercentrics - US","description":"Consent Management Platform (CMP) Usercentrics","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/usercentrics.com\/us\/?s={search_term_string}"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/knowledge\/330","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/knowledge"}],"about":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/types\/knowledge"}],"version-history":[{"count":0,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/knowledge\/330\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/media\/7549"}],"wp:attachment":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/media?parent=330"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/tags?post=330"},{"taxonomy":"magazine_issue","embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/magazine_issue?post=330"},{"taxonomy":"magazine_tag","embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/magazine_tag?post=330"},{"taxonomy":"resource_tag","embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/resource_tag?post=330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}