skip to main content
Privacy Laws & FrameworksCCPA Compliance

CCPA Compliance

CCPA CookiePro

Time Until CCPA Goes Into Effect

What is CCPA?

Effective January 1, 2020, the California Consumer Privacy Act (CCPA) introduces new data privacy rights for California residents – forcing companies that conduct business in the state of California to implement structural changes to their privacy programs.

The law is a response to the increasing role personal data plays in business practices and the personal privacy implications surrounding the collection, use, and protection of personal information.

Failure to comply with the CCPA can result in penalties up to $7500 (USD) for each violation.

 

At a high level, here's what you need to do to comply:
  • Scan your website to detect and categorize cookies and other tracking technologies on your website.
  • Customize a cookie banner and preference center and include a “Do Not Sell” link to enable users to opt-out of advertising and data collection cookies on your website.
  • Automate the intake and fulfillment of California consumers' requests to access or delete their personal information.
  • Track do not sell requests by various unique identifiers, such as account number or device ID, and respond within 45 days.

Who Does the CCPA Apply To?

The CCPA is not focused on the size of your business, but whether it meets certain criteria as outlined below.  

$25M
Annual gross revenue is over $25M
50K
Annually buys, receives, sells or shares the personal information of 50,000 or more consumers, households or devices
50%
Derives at least 50% of annual revenue from selling California consumers’ personal information

The CCPA applies to businesses, which are defined as for-profit organizations that collect personal information about residents in California, determine the purpose and means of the processing, does business in the State of California, and that meets one or more of these criteria.

Consumer Rights Under CCPA

CookiePro Cookie Consent Scanning Checker
Right to Notice

Under the CCPA, businesses must inform consumers at or before the point of collection which categories of personal information will be collected and the purposes for which these categories will be used. The CCPA also sets forth specific disclosures that businesses must include in their privacy policies, including descriptions of consumer rights and how to exercise them.

How CookiePro Helps

Customize your website’s cookie banner with a California-specific consent model, and include a “Do Not Sell” link that allows users to opt-out of advertising and data collection cookies on your website.

  • Scan your website to automatically find and categorize your existing cookies, policies, and notices.
  • Create a dynamic Cookie Policy describing the tracking technologies on your website.
  • Present a custom cookie banner and preference center that allows consumers to opt-in or out of cookies.
  • Add a clear Do Not Sell button to allow consumers to opt-out of the sale of their personal information.
The Right to Access

Consumers have the right to request access to personal information that a business has stored about them, and the business is required to provide details about the information that was collected.

How CookiePro Helps

Intake and fulfill ‘Do Not Sell’ and consumer requests for personal information access and deletion.

  • Build a CCPA-specific request intake web form linked directly from your company’s website.
  • Centralize all consumer access requests into a single queue.
  • Define an automated triage workflow for fulfilling requests.
Targeted Data Discovery
CCPA Right to Opt Out
The Right to Opt Out

Consumers have the right to opt-out of the sale of their personal information to a third party. Businesses that are subject to CCPA will be required to insert a Do Not Sell link on their homepage — as well as in their privacy policy — that leads to an opt-out page for consumers.

 

How CookiePro Helps

Enable website visitors opt-out out of the sale of their personal information and opt back in after 12 months.

  • Provide consumers with the ability to opt-out of the sale of their personal information through a clear and conspicuous link on your website
  • Provide a custom toll-free number to automatically intake consumer requests via phone
  • Track consumer opt-outs and leverage built-in integrations to relay the information to your existing systems
  • Track verifiable consumer consent and sync across systems to avoid the unauthorized sale of data
The Right to Delete

Consumers can request to have their personal information deleted, and businesses must comply with their requests. Under the CCPA, personal information includes information such as name, postal address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

How CookiePro Helps

Intake and track requests through a fully customizable portal.

  • Build a request form using a CookiePro template with default settings and multiple languages
  • Define automated workflows for fulfilling the request within 45 days
  • Transmit a notification to a data subject to protect the communications and information being provided
CCPA Right to Delete
CCPA Look Back Rule
Look-Back Rule

When a consumer makes a verifiable request for access to their personal information, organizations are required to provide records covering the 12-month period preceding the date of the request. This means that your organization should already be maintaining accurate records of consumers’ personal information starting from January 1, 2019.

How CookiePro Helps

By leveraging CookiePro, your organization can pinpoint where personal data resides and how it’s been used over the past 12 months.

  • Provide records covering the 12-month period preceding the date of the request
  • Streamline your ability to act when consumers exercise their rights to information and deletion
  • Manage opt outs relating to the sale of personal information
CCPA Do Not Sell Laptop Mockup

CCPA Do Not Sell WordPress Plugin

Download the new CookiePro CCPA Do Not Sell WordPress plugin to allow website visitors to opt-out of the sale of their personal information.

Download Now

What's New at CookiePro

Countdown to CCPA: Cookies Master Class...
Check out our webinar series to learn how you need to manage cookie consent prior to the CCPA 2020 deadline.
Cookies 2019 Year in Review: ICO
In our weekly Cookies 2019 Year-in-Review blog series, we’re covering headlines that were made from regulations in 2019 about privacy...
CCPA Compliance Checklist: Three-week...
This week in our CCPA Compliance Checklist blog series, we’ll review how to use our product to respond to consumer requests.
CCPA Opt-Out Requirement Solutions
The CCPA Do Not Sell rule gives consumers the right to opt out of the sale of their personal information. Here's how to make sure you...
popup close button