CCPA (California Consumer Privacy Act)
CCPA (California Consumer Privacy Act) is the California state privacy law granting consumers rights over their personal information — including disclosure of data collected, deletion rights, and opt-out from data sales — applying to businesses meeting size thresholds engaging California residents.
Why This Matters
CCPA (effective 2020) and its amendment CPRA (effective 2023) create the most comprehensive US state privacy framework. Applies to businesses with $25M+ revenue, 100K+ California consumer records, or 50%+ revenue from selling consumer data. Consumer rights include: knowledge of data collected, deletion of data, opt-out from sale, non-discrimination for exercising rights, correction of inaccurate data, and limitation of sensitive data use. For B2B: business contacts in professional capacity often fall under different treatment than consumer data, but compliance frameworks must address both contexts. Other states (Virginia, Colorado, Connecticut, Utah) have enacted similar frameworks creating a patchwork of state privacy obligations.
Frequently Asked Questions
Frequently Asked Questions
Does CCPA apply to B2B contact data?
Partial application. Business contacts engaging in B2B context (corporate email, business phone) initially had B2B exemption that expired in 2023. Current CCPA applies broadly to personal data including business contacts, though specific provisions and treatment differ from pure consumer contexts. Compliance frameworks must address B2B data handling explicitly.
What other state privacy laws should B2B companies track?
Virginia CDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Iowa, Indiana, Tennessee, and Texas have all enacted comprehensive privacy laws as of 2024-2025. Each has different thresholds, definitions, and consumer rights. Compliance requires state-by-state evaluation and unified framework addressing the most stringent applicable requirements.