Automate CCPA compliance for your organization

Any for-profit company that does business in California and fulfills any of these requirements: Its annual gross revenue is $25 million or more; it buys, sells, or receives 50,000 or more California residents' personal data; or it derives 50% or more of its annual revenue from selling their consumers’ personal information. Even out-of-state companies are affected by the CCPA and must ensure their privacy practices are updated and compliant. 

Under the CCPA, California residents have a right-to-know about the categories of personal information that is being collected, how it is used, the purpose of its collection, and the categories of third parties that buy or receive this sensitive data. They have a right to opt-out of sale of their personal information, and a right to have their personal information deleted upon request. Companies must also provide a notice of collection that has a Do Not Sell link and a link to their privacy notice. 

While the CCPA focuses on Californians’ consumer privacy rights and the GDPR protects European personal identifiers, these privacy laws are similar in their global reach: companies do not have to be based in either California or Europe to be affected. 

OneTrust provides you with a way to minimize risk of non-compliance by leveraging automation and a centralized regulatory knowledge base so you can stay up-to-date and compliant, shorten data processing, time and quickly fulfill consumer data requests, and maintain data accuracy across web, mobile, and CTV platforms.