The California Consumer Privacy Act (CCPA) is a privacy law that grants California residents rights over their personal data. Consumers can request access to the information businesses collect, request corrections, and demand deletion of their data. Organizations must comply by providing clear processes for exercising these rights and may face penalties for non-compliance. The CCPA aims to increase transparency and control for consumers regarding their personal information.
What it means for organizations:
- Companies must implement mechanisms for consumers to easily exercise their rights (like online opt-out options) and may need to update privacy policies annually.
Consequences without it:
- Non-compliance can lead to fines, with violations costing up to $2,500 per incident, and up to $7,500 for intentional violations.
How to qualify:
- Organizations must meet specific thresholds, including having over $25 million in annual revenue or processing data for 100,000+ consumers.