California Consumer Protection Act (CCPA)

The California Consumer Privacy Act, or CCPA, is a state-level data privacy law that regulates how businesses are allowed to gather, store and handle the personally identifiable information (PII) of California citizens. The CCPA went into effect on January 1st, 2020, and was the first state-level consumer privacy law passed in the United States. Key provisions of the CCPA include the consumer’s right to opt-out of the sale of their data, typically via a “Do not sell my data” button and the “private right of action” which gives private citizens the right to legal action against businesses that mishandle their PII. On January 1st, 2023, the CCPA will be replaced by the California Privacy Rights Act (CPRA), which will take its place as California’s presiding privacy legislation.