California Consumer Privacy Act CCPA State of California Department of Justice Office of the Attorney General
In B2B contexts, clarify in contracts who the “business” under CCPA is and who handles notices and requests. Implement role-based access and least privilege across all systems. Verify platforms like AWS or Salesforce offer necessary compliance features (encryption, audit logs) and that usage doesn’t inadvertently “sell” data. Data without contact information can still fall under