Last Review
Last Update

Statutes

The California Consumer Privacy Act (CCPA), enacted in 2018, creates new consumer rights relating to the access to, deletion of, and sharing of personal information that is collected by businesses.

Cases

Comments

The CCPA applies to any business, including any for-profit entity that collects consumers' personal data, which does business in California, and satisfies at least one of the following thresholds:

  • Has annual gross revenues in excess of $25 million;
  • Buys or sells the personal information of 50,000 or more consumers or households; or
  • Earns more than half of its annual revenue from selling consumers' personal information.

    Organizations are required to "implement and maintain reasonable security procedures and practices" in protecting consumer data.

Contributors

Marshall F. Goldberg

The statutory information was edited and reviewed with the support of MultiState

Become a Content Contributor

The State Law Compendium is made possible through the cooperation, dedication and ongoing efforts of attorney’s who provide and update its statues, cases and comments. Attorneys who would like to volunteer to develop or update compendium content are welcome to contact us to learn more.