The California Consumer Privacy Act (CCPA) is a state statute intended to enhance privacy rights and consumer protection for residents of California, United States. It was passed in 2018 and took effect on January 1, 2020.

Here are some of the key rights that the CCPA gives to consumers:

  1. The right to know: Consumers have the right to request that businesses disclose what personal data they collect, use, share, or sell.
  2. The right to delete: Consumers can request that a business delete any personal information about the consumer which the business has collected.
  3. The right to opt-out: Consumers have the right to direct a business not to sell their personal information, which is referred to as the right to opt-out.
  4. The right to non-discrimination: Businesses cannot discriminate against consumers for exercising their CCPA rights.

For businesses, CCPA applies to any company that does business in California, collects consumers’ personal data, and satisfies one of the following thresholds:

  1. Has annual gross revenues in excess of $25 million.
  2. Buys, receives, sells, or shares the personal information of 50,000 or more consumers, households, or devices for commercial purposes.
  3. Derives 50% or more of its annual revenue from selling consumers’ personal information.

The CCPA was a significant piece of privacy legislation in the U.S. when it was passed, and it has influenced other states to consider or pass similar laws. It has also prompted discussions at the national level about the need for federal privacy legislation.