CCPA
California Consumer Privacy Act
California's consumer privacy law giving residents rights over personal information collected by businesses.
Quick navigation
CCPA
What it means
CCPA focuses on transparency, access, deletion, and the right to opt out of the sale of personal information. In web tracking, 'sale' can include sharing identifiers with ad-tech partners in some contexts.
For marketing websites, the key question is whether you collect or share California visitor data for analytics, advertising, retargeting, or cross-context profiling.
California, United States
Who must comply
- You do business in California and meet CCPA thresholds such as revenue, data volume, or data sale/share activity.
- You collect personal information from California residents through your website or app.
- You use ad-tech, retargeting, or analytics vendors that receive visitor identifiers.
CCPA
What you need to do
- Tell visitors what categories of personal information you collect and why.
- Provide a way to opt out of selling personal information when applicable.
- Respond to access and deletion requests from California consumers.
- Avoid discriminating against users who exercise their privacy rights.
- Document vendor relationships and data sharing purposes.
Plain language
What it is not
CCPA
FAQ
Does CCPA require a cookie banner?
Not always in the GDPR style, but if tracking involves sale or sharing of personal information, visitors need clear notice and opt-out controls.
Who is a California consumer?
A California resident. The person may be visiting from California or otherwise covered as a resident under California law.
Are IP addresses personal information under CCPA?
They can be, especially when combined with cookies, device IDs, analytics profiles, or advertising identifiers.