An acronym for the California Consumer Privacy Act, which applies to businesses operating in California that control the personal information of California consumers. Breach fines are up to $2,500 per accidental violation per consumer, $7,5000 per intentional violation per consumer, and there is a private right for consumers to sue separately.

The CCPA was amended by the California Privacy Rights Act (CRPA), which added a notification requirement. Notification of an incident must take place “without unreasonable delay.” Official summary: California Office of the Attorney General Official text: California Civil Code Title 1.81.5.1798.100