Clym Logo

CCPA

CCPA stands for the California Consumer Privacy Act**, a California privacy law that grants consumers rights over their personal information. The CCPA applies to certain businesses that collect data from California residents and provides rights such as access, deletion, correction, and the ability to opt out of the sale or sharing of personal data.

Summarize full article with:

What is CCPA?

The CCPA, or California Consumer Privacy Act, is a state privacy law that regulates how businesses collect, use, disclose, and sell personal information of California residents.

If you're asking:

  • What does CCPA stand for?
    CCPA stands for California Consumer Privacy Act.
  • What is the CCPA?
    It is a consumer privacy law in California that gives residents more control over their personal data.
  • What does CCPA mean?
    It refers to a legal framework that establishes consumer data rights and business transparency obligations in California.

The law took effect on January 1, 2020, and has since been expanded by the California Privacy Rights Act (CPRA).

CCPA meaning and definition

CCPA definition:
A California state law that grants consumers specific rights regarding their personal information and requires qualifying businesses to provide disclosures and mechanisms for exercising those rights.

The CCPA acronym is commonly written as:

  • CCPA
  • C.C.P.A.
  • C.C.P.A
  • CCPA act
  • California CCPA
  • CA CCPA

All refer to the same law.

Who does the CCPA apply to?

A common question is: Who does CCPA apply to?

The CCPA applies to for-profit businesses that:

  • Operate in California or collect personal information from California residents, and
  • Meet at least one of the following thresholds:
    • Annual gross revenues above $25 million
    • Buy, sell, or share personal information of 100,000 or more consumers or households
    • Derive 50% or more of annual revenue from selling or sharing personal information

Even companies located outside California may be subject to the CCPA if they process data from California residents.

See our in-depth CCPA applicability guide for a full breakdown of coverage rules.

What rights are provided by the CCPA?

The rights provided by the CCPA include:

1. Right of Access

Consumers can request disclosure of:

  • Categories of personal information collected
  • Sources of that information
  • Business purposes for collection
  • Categories of third parties receiving the data

This is often referred to as the CCPA right of access.

2. Right to Deletion

Consumers can request deletion of personal information, subject to certain exceptions.

3. Right to Know

Consumers may request details about what personal data is collected and how it is used.

4. Right to Opt-Out

Consumers can opt out of the sale or sharing of their personal information.

5. Right to Non-Discrimination

Businesses cannot discriminate against consumers for exercising CCPA rights.

ead our full CCPA consumer rights guide for a practical breakdown of each statutory right.

What is a CCPA consumer?

A CCPA consumer is a natural person who is a California resident. The law does not protect businesses or employees in the same way it protects individual consumers.

CCPA vs CPRA: What’s the Difference?

The CPRA (California Privacy Rights Act) amended and expanded the original CCPA (California Consumer Privacy Act).

The CCPA introduced core consumer rights such as access, deletion, and opt-out of sale. The CPRA strengthened the law by:

  • Adding the right to correct inaccurate information
  • Introducing the right to limit use of sensitive personal information
  • Expanding the definition of “sharing” for advertising purposes
  • Creating the California Privacy Protection Agency (CPPA) for enforcement
  • Adding clearer data minimization and retention requirements

The CCPA remains in effect, but it now operates as amended by the CPRA.

CCPA services and business implementation

Organizations subject to the CCPA act typically need to:

  • Provide privacy disclosures
  • Offer “Do Not Sell or Share My Personal Information” mechanisms
  • Handle consumer access and deletion requests
  • Maintain internal data processing documentation

A Consent Management Platform (CMP), Data Subject Request (DSR) workflow system, and centralized legal document management solution can support the operational handling of these requirements.

Related terms:

CPRA (California Privacy Rights Act)

Sensitive Personal Information (SPI)

Data Subject Request (DSR)

Global Privacy Control (GPC)

Consent Management Platform (CMP)

Delete Act (SB 362)

Automated Decision-Making Technology (ADMT)

Frequently asked questions about CCPA

CCPA stands for California Consumer Privacy Act, a state privacy law governing how businesses handle personal information of California residents.

The CCPA applies to certain for-profit businesses that collect personal data from California residents and meet revenue or data processing thresholds defined in the law.

The CCPA right of access allows consumers to request details about the personal information a business collects, uses, and shares.

The full form of CCPA is California Consumer Privacy Act.

While the CCPA specifically applies to businesses in California, its impact extends nationwide, as it affects any company that processes the personal data of California residents, even if they are located outside of the state.

Adam Safar

Head of Digital Marketing

Adam is the Head of Digital Marketing at Clym, where he leverages his diverse expertise in marketing to support businesses with their compliance needs and drive awareness about data privacy and web accessibility. As one of the company’s original team members, Adam has been instrumental in shaping its journey from the very beginning. When he’s not diving into marketing strategies, Adam can be found cheering on his favorite sports teams or enjoying fishing.

Find out more about Adam