A California state law granting consumers specific rights over their personal data, including the right to know what data is collected about them, the right to request deletion, and the right to opt out of the sale of their personal information.
Why it matters
CCPA (and its successor amendments) applies to a large share of U.S. consumer-facing businesses meeting certain size or data-volume thresholds, and has influenced how many companies structure privacy policies and data practices even for consumers outside California, given the practical difficulty of maintaining entirely separate systems for different states.
In a sentence
"Our privacy policy includes a specific CCPA disclosure section, since we meet the law's applicability thresholds even though we're not based in California."
Related terms
- Often confused with: GDPR (see above).