CCPA (California Consumer Privacy Act)
Definition
The California Consumer Privacy Act (CCPA) is a data privacy law that gives California residents greater control over the personal information that businesses collect about them. Effective January 1, 2020, and later amended by the California Privacy Rights Act (CPRA) in 2023, it applies to for-profit businesses that meet certain revenue or data-processing thresholds.
Consumer Rights Under CCPA
Right to Know
Consumers can request what personal data a business collects about them.
Right to Delete
Consumers can request deletion of their personal data.
Right to Opt-Out
Consumers can opt out of the sale or sharing of their personal data.
Right to Non-Discrimination
Businesses cannot penalize consumers for exercising their CCPA rights.
Right to Correct
Consumers can request correction of inaccurate personal data (added by CPRA).
Why It Matters for Forms and Surveys
Any form that collects personal information from California residents must comply with CCPA. Key requirements include:
- Disclosure at collection: tell users what data you collect and why before they submit the form.
- "Do Not Sell" link: if you share data with third parties, provide an opt-out mechanism.
- Data deletion workflows: build processes to honor deletion requests within 45 days.
- Consent management: for users under 16, obtain opt-in consent before collecting data.
CCPA vs. GDPR
| Aspect | CCPA | GDPR |
|---|---|---|
| Scope | California residents | EU/EEA residents |
| Consent | Opt-out model | Opt-in model |
| Fines | Up to $7,500 per violation | Up to 4% of global revenue |
| Data types | Personal information broadly | Personal data broadly |
Related Terms