California Consumer Privacy Act (CCPA) - AB 375

This report displays issues found on your site that are noncompliant with these regulations. Many web application vulnerabilities might lead to security breaches of personal information, directly or indirectly, and might be considered as violations of the regulation.

Why it matters

The California Consumer Privacy Act of 2018 (CCPA) gives consumers more control over the personal information that businesses collect about them and the CCPA regulations provide guidance on how to implement the law. This landmark law secures new privacy rights for California consumers, including:
  • The right to know about the personal information a business collects about them and how it is used and shared;
  • The right to delete personal information collected from them (with some exceptions);
  • The right to opt-out of the sale or sharing of their personal information; and
  • The right to non-discrimination for exercising their CCPA rights.

Best practices for complying with California Consumer Privacy Act (CCPA) - AB 375

  1. Identify the kinds of personal information that the business collects and maintains, including paper-based and electronically-stored personal information.
  2. Determine the level of risk that the potential loss or unauthorized disclosure of information poses to your business and to the public.
  3. Determine if your security measures and procedures are reasonable. In making this determination, weigh the costs of the protection that you currently provide against the damages the business would sustain if the data were to be lost or improperly disclosed.
  4. Adjust procedures and practices so that the type and level of protection provided to the personal information is appropriate for degree of risk of loss or improper disclosure of that information.