The CCPA requires businesses that meet its threshold and run apps or websites to have the following:
- A compliant privacy policy disclosing to consumers what data you collect, why, how it’s used, and their rights over the information;
- A consent management platform to allow consumers to follow through on their rights to opt out of targeted advertising or the selling or sharing of their data;
- A ‘Do Not Sell or Share My Personal Information’ link, a ‘Limit the Use of My Sensitive Personal Information’ link, or some other link to a Data Subject Access Request (DSAR) form that allows consumers to follow through on privacy rights;
- Security measures to protect the access and integrity of the data.