https://isc.sans.edu/forums/diary/CCPA+Quick+Overview/25668/

The CCPA – California Consumer Privacy Act was passed in June 2018 and went into effect January 01, 2020. Some report that the Attorney General office will begin enforcement on July 01, 2020. The law itself does not cite any enforcement date. Some companies have released statements they are adopting this for all customers, not just those in the State of California.

– specific pieces of information that it collects.
– categories of sources from which that information is collected.
– the business purposes for collecting or selling the information.
– the categories of 3rd parties with which information is shared.
– deletion of personal information…upon receipt of a verified request.
– the business to not sell personal information (opt out)
– Authorizes businesses to offer financial incentives for collection of personal info. (They must opt in)
– Prohibits businesses to sell information of a consumer under 16 years of age without an opt in.
– Businesses are not required to provide information more than twice in a 12 month period.
– Businesses must provide a clear and conspicuous link on the Internet home page titled “Do Not Sell My Personal Information”…
– Consumers “opt out” is good for 12 months before the business may request to authorize the sale of information.