The California Consumer Privacy Act (CCPA) enhances privacy rights and consumer protection for residents of California. It means if you are in California, the bill will help you if your private data is in disclosing. Hopefully, other areas of the United States will pass similar laws very soon because information security is becoming a hot topic from the technology industry to everyday life.

The California bill was signed into law on June 28, 2018, to amend Part 4 of Division 3 of the California Civil Code and became effective on January 1, 2020.

As a resident, you will have below rights to companies that run business in California:

1. Know what personal data is being collected.
2. Know whether your data is sold or disclosed and to whom.
3. Say no to the sale of your data.
4. Access your data.
5. Request to delete your personal information
6. Not be discriminated against for exercising their privacy rights.

Here, you had better have a clear concept of who must meet with the bill. At first, it should be a business that collects consumers' data and does business in California. Then it needs to satisfy at least one of the following thresholds:

1. Annual gross revenues above $25 million;
2. Possesses the personal information of 50,000 or more people;
3. or Earns more than half of its annual revenue from selling personal information.

Check If A Business Qualified Under CCAP If you are a customer, there is a quick list to help choose a good business to keep your personal information safe:

1. Implement processes to obtain parental or guardian consent for kids
2. "Right to Say No to Sale of Personal Information" link on website's home page
3. Easily to submit data access requests, including, at a minimum, a toll-free telephone number
4. Privacy policies include a description of California residents' rights
5. Avoid requesting opt-in consent for 12 months after an opts out

If any business leaks your personal information, it's terrible; however, don't forget rights by CCPA. Companies that become victims of data theft can be ordered in civil class action lawsuits.

1. In general, you may claim to pay statutory damages between $100 to $750 per California resident and incident or actual damages.
2. A fine up to $7,500 for each intentional violation and $2,500 for each unintentional violation.

Personal Information  What is the PI(Personal Information)? CCPA gives a definition, which is also referred to in many other cases: It's as information that relates to, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Such as

• real name,
• alias
• postal address
• unique personal identifier
• online identifier
• Internet Protocol address
• email address
• account name
• social security number
• driver's license number
• passport number
• state identification card number

In practice, the below information is usually accepted as personal information, though different areas, industries, or organizations may have different explanations.

• signature,
• physical characteristics
• telephone number,
• state identification card number,
• insurance policy number,
• education information
• employment information
• employment history
• financial information
• medical information
• health insurance information

Now there is no one standard definition for PI. For example, CCPA isn't stricter than GDPR. But the big picture and trend are similar.