Glossary CCPA
CCPA
Also known as:
cpra, california-consumer-privacy-actTechPrivacyCompliance
Definition
California's Consumer Privacy Act (2020, amended by the CPRA in 2023): residents may know what personal information a business holds, have it deleted, and opt out of its sale or sharing — an opt-out model, where GDPR is opt-in
Applies to businesses above revenue or data-volume thresholds, which most personal sites never cross; the "Do Not Sell or Share" link is its visible artifact. It matters here as the other pole of the design space: a site that collects no sale-able data satisfies both regimes without a banner.
The US counterweight to GDPR, built on opting out rather than in. Where GDPR asks permission first, CCPA asks that you be able to say no — and be told what was collected.