Summary: California's privacy law and similar laws in other states affect how websites collect and share personal information. Here is a practical overview.
Several US states now have consumer privacy laws, with California's CCPA, as amended by the CPRA, among the most significant. This is general information, not legal advice.
Does it apply to you?
The law applies to businesses that meet certain thresholds related to revenue or the amount of personal information handled. Check with your adviser.
Key website requirements
- A privacy policy explaining what you collect and why
- A way for consumers to opt out of the sale or sharing of personal information where applicable
- Respect for browser privacy signals where required
- Processes to respond to access and deletion requests
Advertising pixels
Sharing data with ad platforms can count as "sharing" under these laws. Review your tags and consent setup.
Keep records
Document how you handle requests and review your data flows regularly.
FAQs
Do other states have similar laws?
Yes, a growing number of states have comprehensive privacy laws.
Do we need a cookie banner?
Requirements differ from Europe, but opt-out mechanisms may be needed.
Should small businesses worry?
Check whether thresholds apply; good privacy practice helps regardless.
