CCPA for Dummies

CCPA for Dummies
Print Friendly, PDF & Email

Over the past three years, we have blogged extensively about the California Consumer Privacy Act (“CCPA” or the “Act”) and the multiple amendments that have been made to it. All of the CCPA changes can make one’s head spin. “CCPA for Dummies” is an attempt to strip down the Act and make it easier to understand the regulations by highlighting its/their key elements.

CCPA History

California passed the CCPA on June 28, 2018. Initially introduced by privacy activists as a ballot initiative, the CCPA was hastily put together by the California State legislature in an effort to obtain some control over the ability to amend or repeal the Act in the future. The CCPA went into effect on January 1, 2020, and enforcement of the Act began on July 1, 2020. Four modifications have been made to the regulations since that time. In addition, Californians recently voted to approve Proposition 24, the California Privacy Act (“CPRA”), which amended the CCPA yet again, to significantly expand consumer privacy rights.

Who Does the CCPA Apply To?

The CCPA applies to businesses that: 1) do business in the State of California; 2) collect California State resident personal information; and 3) meet at least one of the following thresholds:

  • Have annual gross revenue of over $25 million in total global revenue (regardless of where the revenue is derived from);
  • Buy, receive, sell or share the personal information of 50,000 or more consumers (a “consumer” is defined as a California resident), households or devices for commercial purposes each year; or
  • Derive 50% or more of annual revenue from selling consumer personal information.

Businesses that meet or exceed any of the above thresholds should, if they have not already, diligently work towards achieving CCPA compliance.

Privacy Policy Requirements

Businesses that are subject to the CCPA have to craft and post a privacy policy that adheres to the requirements set forth in the Act. CCPA regulations state that “[t]he purpose of the privacy policy is to provide consumers with a comprehensive description of a business’s online and offline practices regarding the collection, use, disclosure, and sale of personal information and of the rights of consumers regarding their personal information.” To comply with the regulations, privacy policies must disclose: 1) the categories of personal information collected; 2) the source(s) from which the personal information is collected; and 3) the commercial or business purpose for which the personal information was collected and/or sold.

CCPA Forms

The CCPA provides California residents with the right to request that businesses: 1) disclose to them what personal information they have and what they do with that information; 2) delete their personal information; and 3) not to sell their personal information. For businesses to be CCPA compliant they must provide consumers with appropriate forms related to such requests. These CCPA forms (and privacy policies) should be accessible to consumers online and in physical business locations.

Enforcement of the CCPA

The California State Attorney General has started to bring enforcement actions against businesses that it believes have violated the CCPA. Typically, businesses are first provided with a summary of their purported CCPA violations and given thirty (30) days to cure and respond to the Office of the Attorney General. Civil penalties can range from $2,500 for non-intentional CCPA violations, up to $7,500 for intentional violations.

Going Beyond CCPA for Dummies

CCPA for Dummies is only an introduction to some of the measures that businesses need to take in order to become CCPA compliant. As the CCPA regulations continue to evolve, businesses will, in turn, need to adapt their consumer privacy practices. Consulting with experienced consumer privacy attorneys will help in the effort to comply with CCPA regulations. Remember – no one wants to become the subject of a California Attorney General investigation.

If you require assistance in connection with CCPA compliance, please email us at, or call us at (212) 246-0900.

The material contained herein is provided for informational purposes only and is not legal advice, nor is it a substitute for obtaining legal advice from an attorney. Each situation is unique, and you should not act or rely on any information contained herein without seeking the advice of an experienced attorney.

Attorney Advertising

Related Blog Posts:

New CCPA Modifications Released

The CCPA has Passed in to Law. Now When Does it Take Effect?

CCPA Service Provider Agreements: Accounting for the California Consumer Privacy Act (CCPA)

David O. Klein

David O. Klein

David Klein is one of the most recognized attorneys in the telemarketing, technology, Internet marketing, sweepstakes and telecommunications fields. Skilled at counseling clients on a broad range of technology-related matters, David Klein has substantial experience in negotiating and drafting complex licensing, marketing and Internet agreements.

Schedule a Call
In The Know

Trending Topics

New York Sweepstakes Law blog- Klein Moynihan Turco

New York Sweepstakes Law: Are You Compliant?

Print Friendly, PDF & Email

In general, a lottery exists when entrants pay for the chance to win a prize. States alone reserve the right to administer lotteries. Businesses can eliminate one element of what would otherwise be an illegal lottery, in order to transform it into a legal promotional game. If the requirement to

TCPA surveys

An Ad or not an Ad: NY Weighs in on TCPA Surveys

Print Friendly, PDF & Email

Another day, another court decision that refines constitutes a Telephone Consumer Protection Act (“TCPA”) unsolicited fax advertisement. A Manhattan-based federal court recently issued a decision that removes faxed invitations to participate in a survey from the TCPA definition of advertisement. In drawing this distinction for TCPA surveys, the Court held

NY sports gambling law- Klein Moynihan Turco

Agreement Reached to Enact NY Sports Gambling Law

Print Friendly, PDF & Email

This week, Governor Andrew Cuomo and the New York State Legislature agreed to a budget deal that will bring mobile sports betting to the State through a unique NY sports gambling law.  Upon the Governor’s signature, NY sports gambling is primed to become the nation’s largest market. However, New York

UK and US Social Media Influencer Laws

UK and US Social Media Influencer Laws

Print Friendly, PDF & Email

In September of 2020, the United Kingdom’s (“UK”) Committee of Advertising Practice (“CAP”) reviewed the Instagram accounts of 122 UK-based social media influencers to determine whether content was being properly flagged as advertising in accordance with applicable social media influencer laws. This past March, the UK Advertising Standards Authority (“ASA”)

Share on facebook
Share on google
Share on twitter
Share on linkedin