Glossary · Security

CCPA

The CCPA is a California privacy law giving residents the right to know, delete and opt out of the sale or sharing of their personal information by businesses.

Updated October 6, 2026

The CCPA (California Consumer Privacy Act) is a state law that gives California residents rights over their personal information, including the rights to know what is collected, to delete it and to opt out of its sale or sharing. It was expanded by the CPRA.

Why it matters

It applies to for-profit businesses that meet certain thresholds, such as revenue or the volume of consumer data handled. Covered sites typically provide a privacy notice and a Do Not Sell or Share link, and must honor opt-out signals as the rules require. It differs from GDPR in being opt-out oriented for sales rather than requiring consent up front.

Example

A visitor from California clicks Do Not Sell or Share My Personal Information on your site. You must stop selling or sharing their data for cross-context advertising and respect the choice for a defined period.

Common mistakes

  • Assuming small size always exempts you without checking the thresholds.
  • Ignoring requests, which have response deadlines.
  • Not updating the privacy notice when data practices change.

Get notified when this term updates

Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.

Keep reading

Glossary · SecurityCookie ConsentCookie consent is the process of informing visitors about cookies and obtaining their permission before setting non-essential ones, as privacy laws require.Glossary · SecurityCookie Prefixes (__Host- and __Secure-)Cookie prefixes are name prefixes that make browsers enforce extra rules, such as Secure and no Domain attribute, on that cookie.Glossary · SecurityCSRF (Cross-Site Request Forgery)CSRF is an attack that tricks a logged-in user's browser into sending an unwanted request to a site where they are authenticated.Guide · SSL & SecurityCookie Flags Explained: Secure, HttpOnly and SameSiteWhat the Secure, HttpOnly, SameSite, Domain, Path and cookie prefix attributes do, how to set them in common stacks, and how to debug cookies that go missing.7 min readGuide · E-commerceE-commerce Site Security Checklist: 30 Checks for Online StoresA practical security checklist for online stores covering HTTPS, headers, payment pages, third-party scripts, admin access, updates, backups and monitoring.7 min readGuide · E-commerceWooCommerce Checkout Errors: Troubleshooting Guide for Store OwnersDiagnose WooCommerce checkout failures step by step: caching, AJAX and REST errors, plugin conflicts, sessions, payment gateways, SSL and server limits.8 min read

This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.