California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act of 2018 (CCPA) is a state-wide data privacy law that gives consumers more control over the personal information that businesses collect about them. This law secures new privacy rights for California consumers, including:

  • The right to know about the personal information a business collects about them and how it is used and shared;

  • The right to delete personal information collected from them (with some exceptions);

  • The right to opt-out of the sale of their personal information; and

  • The right to non-discrimination for exercising their CCPA rights.

In November of 2020, California voters approved Proposition 24, the CPRA, which amended the CCPA and added new additional privacy protections that began on January 1, 2023.
As of January 1, 2023, consumers have new rights in addition to those above:

  • The right to correct inaccurate personal information that a business has about them; and

  • The right to limit the use and disclosure of sensitive personal information collected about them.

The CCPA applies to for-profit businesses doing business in California, which satisfy any one of the following:

  • Have a gross annual revenue of more than $25 million,

  • Buy, sell, or share the personal information of 100,000 or more California residents or households, or

  • Derive 50% or more of their annual revenue from selling California residents’ personal information.

Pacific College does not meet any of the criteria for the CCPA to apply.