CCPA Requirements
The California Consumer Privacy Act (CCPA) gives California residents important rights over their personal information. Here's what businesses need to know.
What Is the CCPA?
The CCPA is a state-level data privacy law that gives California consumers greater control over their personal information. It was enacted in 2018 and has been amended several times, including the California Privacy Rights Act (CPRA) which strengthened its protections.
Key Consumer Rights Under CCPA
- Right to Know: Consumers can request what personal information a business has collected about them.
- Right to Delete: Consumers can request that a business delete their personal information.
- Right to Opt-Out: Consumers can opt out of the sale or sharing of their personal information.
- Right to Non-Discrimination: Businesses cannot discriminate against consumers who exercise their CCPA rights.
- Right to Correct: Consumers can request correction of inaccurate personal information.
Business Obligations
- Provide a clear "Do Not Sell or Share My Personal Information" link on your website
- Respond to consumer requests within 45 days
- Maintain records of consumer requests for at least 24 months
- Update your privacy policy annually to disclose CCPA-related practices
- Train employees who handle consumer inquiries about the CCPA
Penalties for Non-Compliance
The California Attorney General can fine businesses $2,500 per unintentional violation and $7,500 per intentional violation. Each consumer request that is not properly handled counts as a separate violation.
How OptOutWidget Helps
OptOutWidget simplifies CCPA compliance by providing an embeddable opt-out widget for your website. It automatically collects and records consumer requests, tracks response deadlines, and provides a dashboard to manage everything in one place.