The California Consumer Privacy Act (CCPA) is a state statute intended to enhance privacy rights and consumer protection for residents of California, United States. The CCPA was enacted in 2018 and took effect on January 1, 2020. It was one of the most significant legislative privacy developments in the U.S., aiming to give California residents more control over the personal information that businesses collect about them. Key provisions of the CCPA include: Right to Know: Consumers can request information about the data a business has collected about them, including the categories of personal information, the sources from which it was collected, the purposes for collecting or selling the information, and the categories of third parties with whom the information is shared. Right to Delete: Consumers can request the deletion of their personal information held by businesses and by extension, their service providers. Right to Opt-Out: Consumers can opt out of the sale of their personal information to third parties. For minors under the age of 16, the sale of their information requires affirmative consent. Non-Discrimination: Businesses cannot discriminate against consumers who exercise their CCPA rights, such as by charging different prices or providing a different quality of goods or services. Transparency: Businesses must disclose their data collection, data use, and consumer rights practices in their privacy policies or on their California-specific descriptions of consumers’ privacy rights. The CCPA applies to for-profit entities that do business in California and meet certain thresholds, such as having annual gross revenues in excess of $25 million, buying, receiving, selling, or sharing the personal information of 50,000 or more consumers, households, or devices, or deriving 50% or more of annual revenues from selling consumers’ personal information. Following the CCPA, California voters approved the California Privacy Rights Act (CPRA) in November 2020, which further expands the privacy rights introduced by the CCPA and adds additional layers of complexity and protection for consumers. The CPRA is often referred to as “CCPA 2.0” and started to take effect on January 1, 2023, with enforcement beginning July 1, 2023.