CCPA

An acronym of the California Consumer Privacy Act. The CCPA is a state privacy law that applies to businesses that conduct business in California and:

  1. Maintain gross revenues exceeding $25M
  2. Process personal information of 100,000 or more California consumers
  3. Derive 50% or more of revenue from selling or sharing personal information

Enforcement:

  • Failure to comply with the CCPA can result in regulatory enforcement ($2,500/consumer) or even private class action lawsuits ($750/consumer)

Data definitions

  • Personal Information (PI) is defined as any information that could reasonably be associated with a consumer or household.
  • Sensitive Personal Information (SPI) are special classes of data that are more likely to cause harm to a consumer or household if disclosed or mishandled.