CCPA Compliance Checker
Find out if the California Consumer Privacy Act applies to your business. Check your compliance status and get actionable recommendations.
Advertisement
1 Answer These Questions
2 Your CCPA Status
CCPA Compliance Checklist:
-
Update Privacy Policy Include CCPA-required disclosures about data collection, use, and consumer rights
-
Add "Do Not Sell My Personal Information" Link Required if you sell or share personal information
-
Implement Data Subject Request Process Allow consumers to access, delete, and opt-out of data sales
-
Train Employees Staff handling consumer inquiries must understand CCPA requirements
-
Review Service Provider Contracts Ensure contracts include CCPA-compliant terms
-
Maintain Records Keep records of consumer requests for 24 months
Recommended Best Practices:
Even if CCPA doesn't apply, consider these privacy best practices:
- • Have a clear, comprehensive privacy policy
- • Be transparent about data collection and use
- • Implement reasonable security measures
- • Honor opt-out requests when possible
- • Monitor for changes in privacy laws
Disclaimer: This tool provides a preliminary assessment only and does not constitute legal advice.
CCPA applicability depends on specific business circumstances. Consult with a qualified attorney for definitive guidance on your compliance obligations.
Advertisement
Other Free Legal Tools
Frequently Asked Questions
CCPA (California Consumer Privacy Act) is a California state law that gives California residents rights over their personal information, including the right to know what data is collected, the right to delete it, and the right to opt-out of its sale. It also requires businesses to disclose their data practices.
CCPA applies to for-profit businesses that collect California consumers' personal information AND meet at least one of these thresholds: annual gross revenue over $25 million, buy/sell/share personal information of 50,000+ California consumers annually, or derive 50%+ of annual revenue from selling personal information.
The California Attorney General can impose civil penalties of $2,500 per unintentional violation and $7,500 per intentional violation. Additionally, consumers can sue for data breaches resulting from inadequate security, with statutory damages of $100-$750 per consumer per incident.
CCPA grants California residents: the right to know what personal information is collected and how it's used, the right to delete personal information, the right to opt-out of the sale of personal information, the right to non-discrimination for exercising these rights, and the right to correct inaccurate information (under CPRA amendments).
CPRA (California Privacy Rights Act) is an amendment to CCPA that took effect January 1, 2023. It adds new rights (correction, limiting use of sensitive data), creates the California Privacy Protection Agency, and expands business obligations. Most compliance guidance now refers to "CCPA as amended by CPRA."
Yes, if your business meets the CCPA thresholds and you collect personal information from California residents, you must comply regardless of where your business is located. The law applies based on where your customers are, not where your company is headquartered.