California Consumer Privacy Act (CCPA)
Also known as: CCPA
A California privacy law that gives residents clear rights over how businesses collect, use, and share their personal data. It applies to larger companies and those that handle a lot of data from people who live in California.
CCPA is a California privacy law that focuses on how companies handle personal data. It gives people in California more control over what is collected about them and how it is used. For most teams, it means you need to know what data you store about a person and be ready to show it or delete it when they ask.
If you send email to people in California, CCPA touches almost every part of your list. Email addresses, tracking data, and form submissions all count as personal information. People can ask to see that data, request that you delete it, or tell you not to sell or share it with third parties. You need simple ways for them to contact you and clear steps inside your tools to honor these requests.
A simple starting point is to map where subscriber data flows in your stack. List every tool that stores email addresses or tracking data and note what it is used for. Then set up a basic process for export, deletion, and honoring opt out requests for anyone in California. This keeps you closer to compliance and also builds trust with people on your list.
Related Terms
Privacy Policy(Privacy Notice)
Your privacy policy explains what data you collect from people, how you use it, and how you keep it safe. It sets clear expectations so subscribers know what happens when they share their email and other details with you.
Learn more →GDPR
The General Data Protection Regulation is Europe's privacy law that sets rules for how you collect, store, and use personal data from people in the EU. It shapes how you build email lists, send marketing messages, and handle requests about data access or deletion.
Learn more →Data Retention(Data Retention Policy)
How long you keep customer and email data before you delete it. It sets clear rules for when you remove or anonymize contact and activity data so you only hold what you actually need.
Learn more →Privacy and Electronic Communications Regulations (PECR)(PECR)
PECR is the UK law that covers email, SMS, calls, and other digital marketing. It sets clear rules for consent, marketing messages, cookies, and other tracking.
Learn more →