What Is CCPA Compliance for a CMS?
IntermediateQuick Answer
TL;DR
CCPA (California Consumer Privacy Act) compliance for a CMS requires giving California residents the right to know what personal data you collect, the right to delete it, the right to opt out of data sales, and protection from discrimination for exercising those rights. If your CMS-powered site collects personal information from California residents and your business meets CCPA thresholds, these obligations apply to you.
Key Takeaways
- CCPA applies to for-profit businesses that meet at least one threshold: $25M+ annual revenue, data on 100,000+ consumers, or 50%+ revenue from selling personal data
- California residents have four core rights: know, delete, opt out of sale, and non-discrimination
- Your CMS must support data access and deletion workflows — not just display a privacy policy
- CCPA is similar to GDPR in spirit but differs in scope, thresholds, and specific requirements