What is CCPA - California Consumer Privacy Act?
American privacy law giving California residents control over their personal information
The CCPA (California Consumer Privacy Act) is a groundbreaking privacy law that took effect in January 2020, giving California residents extensive rights over their personal information. In January 2023, the CPRA (California Privacy Rights Act) amendments came into force, significantly expanding protections and establishing the CPPA (California Privacy Protection Agency) as a dedicated enforcement body:
- Right to know- What information is collected, how it's used, and to whom it's sold
- Right to delete- Request deletion of personal information
- Right to opt-out of sale or sharing- Prohibit sale or sharing of information with third parties
- Right to non-discrimination- Prohibition on discrimination for exercising privacy rights
- Right to correct (CPRA)- Require correction of inaccurate personal information
- Right to limit use of sensitive PI (CPRA)- Restrict use of the new "Sensitive Personal Information" category defined under CPRA (including government IDs, precise geolocation, health data, sexual orientation, and more)
Who does it apply to (post-CPRA thresholds):
• Companies with annual revenues over $25 million • Companies processing data of 100,000+ consumers or households (the threshold was doubled from 50,000) • Companies deriving 50%+ of revenue from selling or sharing personal information
Enforcement:
The CPPA is the first U.S. agency dedicated solely to privacy, with direct investigation and enforcement powers (alongside the California Attorney General). Enforcement actions and fines have increased significantly since 2023.
For Israeli companies with California customers, CCPA/CPRA compliance is critical.
⚠️ This information is provided for general informational purposes only and does not constitute legal advice. For professional advice tailored to your organization, please consult a privacy protection expert.
Related Terms
GDPR - General Data Protection Regulation
European regulation protecting personal data, applying to any organization processing EU citizens' data
Amendment 13 to the Privacy Protection Law
A comprehensive amendment to Israeli Privacy Protection Law, in effect since August 2025, strengthening personal data protection
Informed Consent
Consent given after receiving full information about how data will be used
Privacy Protection Law
The main Israeli law regulating personal data protection and privacy
Need Help Implementing?
Our experts can help you understand and implement regulatory requirements in your organization