CCPA

The CCPA (California Consumer Privacy Act) is a California state law enacted in 2018 that gives California residents rights over their personal information - including the right to know what is collected, the right to delete it, the right to opt out of its sale, and the right to non-discrimination for exercising these rights.

The CCPA applies to for-profit businesses that meet certain thresholds (annual revenue over $25M, handling data of 100,000+ consumers, or deriving 50%+ of revenue from selling personal data) and operate in California or collect data from California residents.

For developers working with consumer-facing data, CCPA compliance requires building user-facing rights fulfillment flows (data access requests, deletion requests, opt-out mechanisms) and understanding which data vendors you share personal information with. Unlike GDPR, CCPA focuses primarily on the right to opt out of data selling rather than requiring a positive consent basis for all processing.