The California Consumer Privacy Act (CCPA) is a data privacy law that grants California residents greater control over their personal information and how businesses handle it. It came into effect on January 1, 2020, and applies to for-profit businesses that collect personal data from California residents and meet certain thresholds

Businesses operating in California must comply if they meet one or more of the following criteria:

• Have $25 million or more in annual revenue.
• Buy, receive, sell, or share personal data of 50,000 or more California residents, households, or devices per year.
• Derive 50% or more of their annual revenue from selling consumers' personal information.

Enforced by the California Attorney General and the California Privacy Protection Agency (CPPA).Fines: Up to $7,500 per intentional violation and $2,500 per unintentional violation.

Right to Know – Consumers can request information about what personal data a business collects, how it's used, and with whom it’s shared.

Right to Delete – Consumers can request that a business delete their personal data, with some exceptions.

Right to Opt-Out – Consumers can opt out of the sale of their personal data.

Right to Non-Discrimination – Businesses cannot deny services, charge different prices, or provide a lower quality of service to consumers who exercise their CCPA rights.