Back
California Consumer Privacy Act
governmentoag.ca.gov·oag.ca.gov/privacy/ccpa
Relevant to AI safety discussions around data privacy, consent, and governance; CCPA compliance affects how AI systems can collect and use training or user data in California, making it a key regulatory reference for AI deployment.
Metadata
Importance: 42/100regulationreference
Summary
The California Consumer Privacy Act (CCPA) is a landmark state privacy law granting California residents rights over their personal data, including rights to know, delete, and opt out of the sale of personal information. It establishes obligations for businesses handling consumer data and is enforced by the California Attorney General. The law serves as a significant model for consumer data protection in the US.
Key Points
- •Grants California residents rights to access, delete, and opt out of sale of their personal information collected by businesses.
- •Applies to for-profit businesses meeting thresholds related to revenue, data volume, or data monetization.
- •Requires businesses to disclose data collection practices and provide mechanisms for consumers to exercise their rights.
- •Enforced by the California Attorney General with civil penalties for violations.
- •Serves as a foundational US privacy regulation influencing AI data governance and consent frameworks.
Cited by 1 page
| Page | Type | Quality |
|---|---|---|
| AI Preference Manipulation | Risk | 55.0 |
Cached Content Preview
HTTP 200Fetched Mar 15, 202643 KB
California Consumer Privacy Act (CCPA) | State of California - Department of Justice - Office of the Attorney General
Skip to main content
-->
-->
California Consumer Privacy Act (CCPA)
Home
Privacy
California Consumer Privacy Act (CCPA)
Updated on March 13, 2024
The California Consumer Privacy Act of 2018 (CCPA) gives consumers more control over the personal information that businesses collect about them and the CCPA regulations provide guidance on how to implement the law. This landmark law secures new privacy rights for California consumers, including:
The right to know about the personal information a business collects about them and how it is used and shared;
The right to delete personal information collected from them (with some exceptions);
The right to opt-out of the sale or sharing of their personal information including via the GPC ;
The right to non-discrimination for exercising their CCPA rights.
In November of 2020, California voters approved Proposition 24, the CPRA , which amended the CCPA and added new additional privacy protections that began on January 1, 2023. As of January 1, 2023, consumers have new rights in addition to those above, such as:
The right to correct inaccurate personal information that a business has about them; and
The right to limit the use and disclosure of sensitive personal information collected about them.
Businesses that are subject to the CCPA have several responsibilities, including responding to consumer requests to exercise these rights and giving consumers certain notices explaining their privacy practices . The CCPA applies to many businesses, including data brokers .
CPRA amends the CCPA; it does not create a separate, new law. As a result, our office typically refers to the law as “CCPA” or “CCPA, as amended.”
Links to Topics
A. GENERAL INFORMATION ABOUT THE CCPA
B. RIGHT TO OPT-OUT OF SALE OR SHARING
C. REQUESTS TO KNOW
D. REQUESTS TO DELETE
E. REQUESTS TO CORRECT
F. REQUESTS TO LIMIT USE OF PERSONAL INFORMATION
G. RIGHT TO NON-DISCRIMINATION
H. REQUIRED NOTICES
I. DATA BROKERS AND THE CCPA
Other Consumer Resources on CCPA
Frequently Asked Questions (FAQs)
These FAQs provide general consumer information about the CCPA and how you can exercise your rights under the CCPA. They are not legal advice, regulatory guidance, or an opinion of the Attorney General. We will update this information periodically.
A. GENERAL INFORMATION ABOUT THE CCPA
1. What rights do I have under the CCPA?
If you are a California resident, you may ask businesses to disclose what personal information they have about you and what they do with that information, to delete your personal information, to direct businesses not to sell or share your personal information, to correct i
... (truncated, 43 KB total)Resource ID:
0c58f8e2be57f450 | Stable ID: OWZjY2NkOD