An acronym of the California Consumer Privacy Act. The CCPA is a state privacy law that applies to businesses that conduct business in California and:
- Maintain gross revenues exceeding $25M
- Process personal information of 100,000 or more California consumers
- Derive 50% or more of revenue from selling or sharing personal information
- Failure to comply with the CCPA can result in regulatory enforcement ($2,500/consumer) or even private class action lawsuits ($750/consumer)
- Personal Information (PI) is defined as any information that could reasonably be associated with a consumer or household.
- Sensitive Personal Information (SPI) are special classes of data that are more likely to cause harm to a consumer or household if disclosed or mishandled.