CCPA Compliance Guide
California's privacy law — explained simply

Who needs this privacy policy?

CCPA applies to for-profit businesses that collect California residents' personal data AND meet at least one of these thresholds:

• Annual gross revenue over $25 million
• Buy, sell, or share personal data of 100,000+ California consumers or households per year
• Derive 50%+ of annual revenue from selling California residents' personal data

If you don't meet any threshold, strict CCPA compliance isn't mandatory — but having a good privacy policy that covers California residents is still best practice and builds trust.

What your privacy policy will include

• ✓
  Data categories disclosure — categories of personal information collected in the past 12 months
• ✓
  Purpose disclosure — why you collect each category of data
• ✓
  Data sharing disclosure — third parties you share data with
• ✓
  Consumer rights — right to know, delete, opt-out, and non-discrimination
• ✓
  Do Not Sell statement — if you don't sell data, state it clearly
• ✓
  Contact method — how California residents can submit data requests

Common questions

More free legal generators