CCPA Compliance – California Consumer Privacy Act Guide

UniConsent helps businesses achieve full CCPA compliance by offering tools that support consumer data rights and consent management. The California Consumer Privacy Act (CCPA) governs how websites and companies handle the personal information of California residents.

What Is the CCPA?

The California Consumer Privacy Act (CCPA) is a comprehensive data privacy law that took effect on January 1, 2020. It enhances the rights of California residents and regulates how businesses:

• Collect personal data
• Sell or share consumer information
• Respond to consumer data requests

Along with other privacy laws such as the GDPR, CCPA defines how businesses should handle website tracking, cookies, and user data in a privacy-compliant way. Learn more about how UniConsent supports CCPA compliance.

Does the CCPA Apply to My Business?

The CCPA regulation applies to businesses that meet at least one of the following thresholds:

• Generate over $25 million in annual gross revenue
• Collect personal data from 50,000 or more California residents, households, or devices annually
• Derive 50% or more of annual revenue from the sale of personal information

If your website or application falls under these criteria, you are legally required to comply with the California privacy law.

Do Not Sell or Share My Personal Information: CCPA Rule

Under the CCPA, as amended by the CPRA, businesses that sell personal information or share it for cross-context behavioral advertising must give consumers a clear way to opt out.

To meet this requirement:

1. Provide a "Do Not Sell or Share My Personal Information" link, or the "Your Privacy Choices" link with its opt-out icon
2. Place the link where consumers can easily find it, such as your website footer
3. Allow users to opt out without creating an account
4. Treat a Global Privacy Control (GPC) signal as a valid opt-out request
5. Offer "Limit the Use of My Sensitive Personal Information" when you use sensitive personal information for other purposes
6. Wait at least 12 months before asking a consumer who opted out to opt back in

UniConsent shows the CCPA notice with a one-click opt-out on the first layer, keeps the detailed settings behind Manage Options, and provides the opt-out link for your footer.

CCPA Cookie Consent Manager by UniConsent

Cookies and tracking technologies may be considered personal information under CCPA. These technologies collect data such as:

• IP addresses
• Device identifiers
• Location information
• Browsing behavior

To comply with CCPA, your business should:

• Provide opt-in and opt-out mechanisms for cookies
• Allow users to control cookie categories
• Inform users of the types of cookies being used

Use the UniConsent Cookie Consent Manager to ensure your website meets California data protection standards.

Consumer Rights Under the CCPA

The CCPA grants California residents several key consumer data rights, including:

• Right to Know: Consumers can request disclosure of personal data collected, used, shared, or sold in the past 12 months.
• Right to Delete: Consumers can request the deletion of personal data collected by the business.
• Right to Opt Out: Consumers can opt out of the sale of personal data to third parties.
• Right to Non-Discrimination: Businesses must not discriminate against users who exercise their privacy rights.

UniConsent enables these user rights management features through a compliant interface that simplifies privacy request handling. Learn more on the CCPA Consent Management page.

What Is Considered Personal Information Under the CCPA?

Personal information under CCPA includes, but is not limited to:

• Identifiers: cookies, device IDs, IP addresses, account usernames, email addresses
• Biometric information: face scans, fingerprints, voice recordings, DNA
• Geolocation data: GPS and location history
• Internet activity: browsing history, interaction with websites, ads, and apps
• Profile information: inferences drawn from personal data (e.g., preferences, behaviors)

If your website collects any of this information through cookies or other tracking mechanisms, a CCPA-compliant cookie banner is essential. Visit UniConsent’s CCPA Solutions for more information.

How UniConsent Helps You Stay CCPA Compliant

UniConsent covers the CCPA and CPRA requirements in one platform:

• "Do Not Sell or Share" and "Your Privacy Choices" opt-out links, translated into every banner language
• "Limit the Use of My Sensitive Personal Information" for the sensitive data purposes you define
• Global Privacy Control (GPC) honored as an opt-out of sale, sharing and targeted advertising
• IAB Global Privacy Platform (GPP) and US Privacy signals for your advertising partners
• US State Privacy for 19 more states, from Virginia and Colorado to Texas and New Jersey
• Google Consent Mode v2 updated from each user's choice
• Tools to manage user access and deletion requests
• Mobile SDKs for iOS, Android, Flutter and React Native with the same opt-out and GPP signals

Explore UniConsent's CCPA compliance tools to protect your business and respect consumer privacy.

Additional CCPA Resources

• Official CCPA Text from the California Attorney General
• UniConsent Guide: CPRA
• UniConsent Guide: Global Privacy Control
• CCPA Consent Solutions by UniConsent
• IAPP CCPA Overview