Compliance

CCPA / CPRA California's privacy laws letting consumers control how their personal data is used and sold

← All Glossary Terms
The California Consumer Privacy Act (CCPA, 2018), expanded by the California Privacy Rights Act (CPRA, 2020, effective 2023), is a set of state privacy laws that gives California consumers rights over their personal information. Under these laws, you have the right to know, delete, correct, and opt out of the 'sale' or 'sharing' of your personal information. The laws matter heavily in lead generation because selling consumer leads can count as a 'sale' under the statute, triggering disclosure and opt-out obligations. Companies that buy or sell leads tied to California residents typically need to provide notice, honor opt-out requests, and update their privacy practices accordingly. Requirements and enforcement details often vary based on a business's size, revenue, and how much data it handles, so compliance specifics can differ from one company to the next.
CCPA CPRA California Consumer Privacy Act California Privacy Rights Act
  1. A mortgage lead buyer updated its privacy policy to give California residents a clear way to opt out of the 'sale' of their personal information under CCPA/CPRA.
  2. Dreamy Leads reviewed its data-sharing agreements to confirm California leads could exercise their rights to know, delete, and correct their information.
  3. An insurance marketer added a 'Do Not Sell or Share My Personal Information' link to comply with CPRA after determining lead transfers counted as a 'sale'.

Does selling my lead count as a 'sale' under CCPA?

It often can. The CCPA, expanded by the CPRA, treats transferring your personal information to another company for value as a 'sale' or 'sharing.' That means California consumers have the right to opt out. Exactly how a business applies this depends on its data practices, so check each company's privacy notice.

What rights do I have under CCPA and CPRA?

If you're a California consumer, you have the right to know what personal information a business collects, delete it, correct it, and opt out of the 'sale' or 'sharing' of that information. The CPRA, effective 2023, expanded these rights beyond the original 2018 CCPA framework.

Do these laws apply outside California?

The CCPA and CPRA specifically protect California consumers, so the rights described apply to California residents. Other states have their own privacy laws that differ. If you live elsewhere, your protections vary by state, so review the applicable law and each business's privacy policy for your situation.

Ready to compare insurance options?

Free quotes from licensed experts — no spam, no obligation, results in 60 seconds.

Get Free Quotes →
Get Free Quotes → All Terms