Legislation Tracker

California’s Consumer Privacy Act and What It Means for Your Business

The political world can be vast and confusing, especially when it comes to laws that can affect your business. Luckily, Elroi is here to help and keep you both up to date and compliant! While we do not yet have a national data privacy law in the United States, state policies, such as the California Consumer Privacy Act, can still have major impacts on how you conduct business.

The political world can be vast and confusing, especially when it comes to laws that can affect your business.  Luckily, Elroi is here to help and keep you both up to date and compliant! While we do not yet have a national data privacy law in the United States, state policies, such as the California Consumer Privacy Act, can still have major impacts on how you conduct business.  

Check out the information and tips below to make sure your business is up to date and compliant with the new laws in California. 


  1. What exactly is the California Consumer Privacy Act?

The California Consumer Privacy Act (CCPA) was passed by the state of California in 2018 and went into effect on January 1st, 2020.  This law gives Californian’s:

  • The right to know what personal information is being collected about them.  This is done through a private policy/notice.  The notice should detail what information specifically is being collected. 
  • The right to delete any personal data that has been collected by businesses (*there are a few exceptions, detailed below).
  • The right to opt-out, meaning that consumers can refuse to have their information sold to third parties. 
  • The right to non-discrimination by businesses whom cannot charge more or treat customers differently based on the Californian laws.  


  1.  Does the California law pertain to my business?


The California Consumer Privacy Act (CCPA) applies to all for-profit businesses that work with Californians and that meet one, or more, of the below qualifiers:

  • Have an annual revenue of over $25 million. 
  • Make 50% or more of their profit from California residents.
  • Take personal information from 50,000 or more Californians. 


  1. I do not live or work in California.  Do I still have to comply?


Yes!  The CCPA effects any for-profit business that meets the criteria above.  


  1. How is “Personal Information” defined under the CCPA?


“Personal Information” is defined broadly under the CCPA.  The law’s technical definition is “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household”.  Some of the information is:

  • Full names
  • Driver’s License numbers
  • Online tracking information
  • Purchase histories
  • Social Security numbers

The CCPA excludes:

  • Publicly available data
  • Medical and Health Information as protected under HIPAA


  1. How can I become compliant?


One of the easiest ways for your company to become compliant under the CCPA is by reaching out to Elroi.  With expert data privacy knowledge, we can help your company become more compliant with data laws from California and European data protection laws too!

We offer:

  • Tacking Dashboards:  To keep you up to date with all privacy laws
  • Easy Webforms:  Integrates easily with your website 
  • Templates and Smart Guides:  Keeping your customers informed and in the loop


Make sure your company is in compliance by following our blog, our social media platforms, and by letting Elroi take care of all your privacy needs!


#PrivacyPlease!