California Consumer Privacy Act (CCPA)
An Overview Of CCPA Requirements and Tips for Compliance
- Critical definitions
- Possible business exemptions
- Obligations for your business to comply
- Consumer rights
- New requirements around data breaches
- Consequences of non-compliance
and more, with an emphasis on our tips for complying. Read more from our expert CCPA compliance team!
Download our newest whitepaper to take a deep dive into the California Consumer Privacy Act (CCPA) with our overview of the regulatory requirements and our expert advice for compliance.
More about CCPA
Learn more about how CCPA applies to you as an organization if you have a certain gross income, are a data broker or sell consumers' personal data. Also learn how we can help you.
- Those who have a gross annual revenue of at least $25 million (or)
- Those who are a data broker or other business that buys, sells, or shares personal data of 50,000 or more consumers, households, or devices (or)
- Those who get the majority of their annual revenue from selling consumers’ personal data
How we can help you
Any opt-out mechanism you offer must be able to process opt-out requests for at least 30 days after you send your message. You must honor a recipient’s opt-out request within 10 business days. You can’t charge a fee, require the recipient to give you any personally identifying information beyond an email address, or make the recipient take any step other than sending a reply email or visiting a single page on an Internet website as a condition for honoring an opt-out request. Once people have told you they don’t want to receive more messages from you, you can’t sell or transfer their email addresses, even in the form of a mailing list. The only exception is that you may transfer the addresses to a company you’ve hired to help you comply with the CAN-SPAM Act.
- We can monitor what others are doing on your behalf
- The law makes clear that even if you hire another company to handle your email marketing, you can’t contract away your legal responsibility to comply with the law. Both the company whose product is promoted in the message and the company that actually sends the message may be held legally responsible.
Contact an Expert