What is the California Consumer Privacy Act?
Learn more about what you need to do in order to become compliant as a website owner under the CCPA law
CCPA came into effect on January 1st, 2020
What is the CCPA?
The California Consumer Privacy Act (CCPA) is a Data Privacy law meant to enhance privacy rights and consumer protection for residents of California, United States.
The CCPA regulates how businesses may collect, share and process personal information (PI) of Californian residents.
The new law, effective of January 1st 2020, is a result of an increased role of personal information in contemporary business practices and the personal privacy implications surrounding the collection and processing (use of) consumers’ personal information.
Failure to comply with the CCPA may result in penalties of up to $7500 for each violation and $750 for each affected user in civil damages.
สารบัญ
Checklist to comply with the CCPA
- Scan your website to detect and categorize cookies and other tracking technologies set by your website.
- Customize your cookie banner with privacy controls and include a “Do Not Sell” link to enable users to opt-out of advertising and data-collecting cookies on your website.
- Automate the fulfillment of Californian consumers' requests to access or delete their personal information.
- Track "Do Not Sell" requests by unique identifiers, such as account number or device ID, and respond to the consumer within 45 days.
Who does the CCPA apply to?
Consumer rights under the CCPA
Five central CCPA consumer rights
The CCPA requires you to inform your users (consumers) at the point of - or before - the collection of their personal information.
You must describe which categories of personal information you collect and what the data is used for (purpose). Furthermore, you must include a description of consumer rights and how to exercise those rights in your privacy policy.
Your users have the right to request access to the personal information your business stores about them.
As a business, you are required to provide the necessary information collected.
Your users have the right to opt-out of the sale of their personal information (also to a third party).
You are required to implement a “Do Not Sell” link on your website and in your privacy policy. This way, your users can easily opt-out of personal data collection.
Your users can request to have their personal information deleted. If they do, you must meet their request.
Personal information, under the CCPA is: name, postal address, email address, account name, driver’s license number, passport number, and other data that can identify your user.
If one of your users (consumer) requests access to their personal information, you are required to provide a detailed record for the past 12 months (at the time of the request).
CCPA VS GDPR
Contrary to the General Data Protection Regulation, which is a European law that focuses mainly on complete privacy of the user of a website by default, the CCPA is more based on the idea of transparency and being able to opt-out.
The CCPA also needs to be informative about the data transfers and previously sold user-information from the past 12 months.
How can we help your business?
- Cookie pop-up where users can opt-out of the collection of personal information
- "Do Not Sell" link both in the cookie pop-up and in the privacy policy
- Complete scan of your website to find and categorize all cookies by purpose
- Cookie policy (automatically) describing all cookies specific to your website
- Customizeable cookie pop-up with company colors and logo
- Consent log
Get a 30-day free trial to Cookie Information’s CCPA consent solution to comply with the California Consumer Privacy Act.
