Document background
The CCPA Privacy Notice is required for businesses that collect personal information from California residents and meet one or more of the following thresholds: annual gross revenues exceeding $25 million, buying/selling/sharing personal information of 100,000+ consumers/households, or deriving 50% or more of annual revenue from selling/sharing personal information. This document must clearly communicate the business's data collection and processing practices, consumer privacy rights, and methods for exercising these rights. It should be readily accessible to consumers and updated at least every 12 months. The notice must comply with both the California Consumer Privacy Act and its amendment, the California Privacy Rights Act (CPRA), which introduced additional requirements effective January 1, 2023. Businesses operating across multiple jurisdictions often integrate CCPA requirements with other privacy law obligations, such as GDPR, to maintain consistent global privacy practices.
