The CCPA requires you to inform your users (consumers) at the point of - or before - the collection of their personal information.
You must describe which categories of personal information you collect and what the data is used for (purpose). Furthermore, you must include a description of consumer rights and how to exercise those rights in your privacy policy.
Your users have the right to request access to the personal information your business stores about them.
As a business, you are required to provide the necessary information collected.
Your users have the right to opt-out of the sale of their personal information (also to a third party).
You are required to implement a “Do Not Sell” link on your website and in your privacy policy. This way, your users can easily opt-out of personal data collection.
Your users can request to have their personal information deleted. If they do, you must meet their request.
Personal information, under the CCPA is: name, postal address, email address, account name, driver’s license number, passport number, and other data that can identify your user.
If one of your users (consumer) requests access to their personal information, you are required to provide a detailed record for the past 12 months (at the time of the request).