The California Consumer Privacy Act is a state statute intended to enhance privacy rights and consumer protection for residents of California, United States. The California Consumer Privacy Act (CCPA) is a bill passed by the state of California legislature on June 28, 2018. The CCPA is set to be the toughest privacy law in the United States. It broadly expands the rights of consumers and requires companies within scope to be significantly more transparent about how they collect, use, and disclose personal information. The CCPA is effective January 1, 2020, and enforcement is slated to begin no later than July 1, 2020.


The CCPA applies to a business, meaning a legal entity organized or operated for the profit or financial benefit of its owners, which is one of the following.

  • Either:
    • Has annual gross revenues in excess of $25 million
    • Alone or in combination, annually buys, receives for the business’s commercial purposes, sells, or shares for commercial purposes, alone or in combination, the personal information of 50,000 or more consumers, households, or devices
    • Derives 50 percent or more of its annual revenues from selling consumers’ personal information
  • Collects consumers’ personal information
  • Determines the purposes and means of the processing of consumers’ personal information
  • Does business in California

A consumer means a California resident.

Personal information means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, and the CCPA describes various types of personal information.

Sell, selling, sale, or sold means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means a consumer’s personal information by one business to another business or a third party for monetary or other valuable consideration.

CCPA Gap Assessment

CCPA Data Mapping

CCPA Privacy Policies

CCPA Processes for New Individual Rights

CCPA Cyber Security & Data Breach Policies

CCPA Corporate Awareness Training