CCPA is the California Consumer Protection Act. Among other things, it prescribes the data protection laws for California businesses and residents.
The CCPA requires businesses to provide users with a privacy policy that contains specific elements and to let them opt out from the sale of personal data.
However, it doesn’t apply to all businesses. In fact, it doesn’t apply at all to the type of businesses indie hackers, small startups and solo entrepreneurs run.
CCPA applies only to businesses that meet at least one of the following thresholds:
- Have annual gross revenue of more than $25M
- Processes personal information of at least 50.000 California residents annually
- Earns at least 50% of the annual revenue from selling consumers’ personal information.
These do not seem like small businesses. So, until you go big, forget about CCPA compliance.