The California Consumer Privacy Act, effective from January 1, 2020, is a landmark US state privacy law granting California residents comprehensive rights over their personal information. It applies to for-profit businesses that collect California residents’ personal information, meet specific thresholds (annual revenues over $25 million, data of 50,000+ consumers, or 50%+ revenue from selling data), and do business in California. Key rights include knowing what personal information is collected, right to delete, right to opt-out of sale, and right to non-discrimination. Businesses must provide clear privacy notices, implement opt-out mechanisms, and maintain reasonable security procedures. The CCPA introduced the concept of “sale” of personal information broadly, including sharing for valuable consideration. Penalties include $2,500 per violation or $7,500 for intentional violations, plus a private right of action for data breaches.
