The CCPA (California Consumer Privacy Act) is a California state law that gives residents rights over the personal data companies collect about them, including the right to know what’s collected, request deletion, and opt out of its sale. It’s one of the most influential US privacy laws and a common compliance reference point alongside GDPR.

Examples

• A company adds a “Do Not Sell My Personal Information” link to comply with CCPA.

• A user submits a CCPA request to see what personal data a company holds about them.

• A privacy policy lists CCPA rights alongside GDPR rights for a global user base.

FAQs

Who does the CCPA apply to?

Businesses that meet certain revenue or data-volume thresholds and handle the personal data of California residents.

How is CCPA different from GDPR?

CCPA is a US state law focused on consumer rights like opt-out and disclosure, while GDPR is a broader EU regulation with stricter consent requirements.

Does CCPA apply to web3 companies?

It can, if they handle qualifying personal data of California residents, regardless of whether the product itself is decentralized.