CCPA and CPRA Compliance Software: Easy Compliance In Minutes

The California Consumer Privacy Act (CCPA) is a significant privacy law designed to provide enhanced rights and protections for California residents. It gives individuals greater control over how their personal data is collected, processed, and shared by businesses. A data subject, or someone acting on their behalf, does not need to be a customer of your eCommerce store for their request to be valid. This can include current or former employees, corporate partners, sponsors, suppliers, contractors, or anyone else who believes you may hold their personal data.

The best CCPA compliance tools automate these processes, ensuring you stay compliant with ease.

The California Consumer Privacy Act (CCPA) includes five key "rights" that businesses must adhere to when collecting personal information from California residents:

• Right to Notice: Consumers must be informed about the collection and use of their personal data.
• Right to Disclosure: Consumers have the right to know what personal data is being collected and how it’s being used.
• Right to Opt-Out: Consumers can opt-out of the sale of their personal data.
• Right to Fair Treatment: Consumers are entitled to non-discrimination for exercising their privacy rights.
• Right to Request Deletion: Consumers can request the deletion of their personal data.

The term "data subject access request" (DSAR) may seem technical, but at its core, it’s simply a request from an individual—referred to as the data subject—asking to access the personal data you hold about them. Typically, they want to view or retrieve their data, which is why it's called a data subject access request.

The Attorney General has the authority to impose injunctions and civil penalties on businesses for noncompliance with the CCPA. The penalty is $2,500 for each violation, which can increase to $7,500 per violation if deemed intentional. These penalties are assessed per violation, meaning if the violation affects hundreds or thousands of individuals, the total penalty can escalate significantly.