What are CCPA Notice Requirements?

Lawrence Bonk Profile image

Written by:

Updated January 6, 2023

If you are new to the madcap world of online privacy, you may wonder what are CCPA notice requirements. Many of the best websites and online shopping platforms, after all, have adopted a number of practices that impact consumer privacy, which is where the CCPA and notice requirements come in. So what is the CCPA, what is a notice requirement, and how do they help consumers? Keep reading to find out.


  • CCPA stands for the California Consumer Privacy Act, and it is a suite of regulatory tools to enhance privacy rights for business purposes.
  • Within these privacy policy regulations, there are multiple notice requirements that force companies to comply with deletion requests of social security numbers, email address information, mobile app data, and more.
  • CCPA regulations also mandate notice requirements on sites and apps at the point of signup if a company plans on selling personal information.

For more information on consumer privacy, check out CCPA data collection notices, their opt-in email requirements, and what is considered sensitive personal information under CPRA.

Insider Tip

When signing up with a service offered by a company in California, look for dialog boxes indicating your information might be sold.

What is the CCPA?

CCPA stands for the California Consumer Privacy Act, and it is a suite of comprehensive privacy regulations that primarily benefit California citizens but extend to people who use online services founded by California-based entities (in some instances). This act, and the associated regulatory agency, work to enhance online privacy for individuals. The act was passed in 2018 and created a number of rights for Internet users, such as the right to receive timely notices on the status of any requests.

What are the CCPA Notice Requirements?

The CCPA allows consumers to request business entities to delete personal information and to refrain from selling personal information to third parties. To stop companies from taking advantage of your private data, you must formally advance a deletion or opt-out request. That is where notice requirements come into play. Companies must notify you of your request’s status in a timely fashion. For instance, companies have 45 days to comply with deletion requests once a consumer’s identity has been confirmed, though that company must have an annual profit margin of $25 million.

Further Notice Requirements

Companies have some notice requirements to adhere to at the point of entry, meaning when consumers sign up for a service. If a company is normally involved with data brokerage, selling private data, or anything else somewhat suspicious, they must notify consumers before they opt into any available service. This includes notifications of email marketing campaigns, mobile pop-ups, cookie banners, and just about anything else.

STAT: Businesses are required to give consumers certain notices explaining their privacy practices. The CCPA applies to many businesses, including data brokers. (source)

Unfortunately, these warnings are typically buried in legalese somewhere in the contract you read before signing up for a new service. In other words, it is within those pages of documents that nobody actually reads. Luckily, the CCPA allows consumers to notify companies and request deletions and various removal services even after signing up with a company.

CCPA Notice Requirement FAQs

What is a privacy policy?

A privacy policy indicates a consumer’s rights when dealing with a corporate entity, as the CCPA states that companies must not share email addresses unless they have issued notice requirements.

Who has rights under the CCPA?

Consumer requests should be honored promptly, including the deletion of email addresses, debit card information, credit card information, and social security numbers. In other words, consumers have the rights here with regard to privacy notices.

What businesses are affected?

California-based businesses that make more than $25 million annually are impacted by CCPA privacy policies, CCPA regulations, and privacy rights mandates. CCPA rights may extend to California citizens or anyone issuing consumer requests to the aforementioned institutions.
Lawrence Bonk Profile image