Who CCPA applies to
Your business if it meets ANY of:
- Annual revenue over $25M
- Buys/sells/shares personal data of 50,000+ California residents/year
- Derives 50%+ of revenue from selling consumer data
The 5 CCPA rights
- Right to know what data is collected
- Right to delete personal information
- Right to opt-out of sale
- Right to non-discrimination
- Right to correct inaccurate data (CPRA expansion)
What B2B teams typically need
- Privacy policy disclosing data collection practices
- Process for handling "right to delete" requests within 45 days
- Documentation of data sources and retention periods
- "Do Not Sell" link if applicable (most B2B SaaS: not applicable)
Fines
$2,500 per violation. $7,500 per intentional violation. Class actions possible for breaches involving 100K+ records.