California Privacy Rights
The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant California residents specific rights regarding their personal information. If your business collects data from California residents, you need to include CCPA-specific disclosures in your privacy policy.
Who Must Comply
CCPA/CPRA applies to businesses that:
- Have annual gross revenue exceeding $25 million, OR
- Buy, sell, or share personal information of 100,000+ California residents/households, OR
- Derive 50%+ of annual revenue from selling or sharing personal information
Even businesses below these thresholds may need to provide CCPA-style disclosures when handling California user data.
Required Disclosures
CCPA/CPRA requires specific disclosures in your privacy policy.
Categories of Personal Information Collected
Disclose what types of personal information you collect (identifiers, commercial information, internet activity, geolocation, etc.)
Sources of Personal Information
Explain where you collect information from (directly from users, third party services, cookies, etc.)
Business or Commercial Purpose
Explain why you collect and use personal information (service delivery, marketing, analytics, etc.)
Third Party Sharing
Disclose if you sell or share personal information with third parties (advertising networks, analytics providers, etc.)
Example Structure
This page provides an example structure for educational purposes. A complete CCPA privacy policy must be customized to reflect your specific data practices and disclosures.
Additional Rights for California Residents (CCPA / CPRA)
If you are a California resident, you have the following additional rights:
- Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell or share about you.
- Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., transaction records, legal compliance).
- Right to Correct: You have the right to request that we correct inaccurate personal information.
- Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. If we sell or share personal information, we will provide a "Do Not Sell or Share My Personal Information" link.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.
- Right to Limit Use of Sensitive Personal Information: You have the right to limit how we use sensitive personal information (under CPRA).
To exercise these rights, contact us at [email] or use our online request form. We will verify your identity and respond within the timeframes required by CCPA/CPRA (generally within 45 days). You may designate an authorized agent to make requests on your behalf.
Generate Full CCPA Privacy Policy
Create a customized, CCPA/CPRA-compliant privacy policy for your business in under 60 seconds.
Structured around widely accepted GDPR and CCPA requirements. Not legal advice.