The California Consumer Privacy Act (CCPA) is California's baseline privacy law, in force since January 2020 and expanded by the CPRA from January 2023. It applies to for-profit businesses in California that meet one threshold: $25M+ revenue, PI from 100,000+ California consumers, or 50%+ revenue from selling or sharing PI. Consumers have rights to know, delete, correct, opt out of sale and sharing, and limit use of sensitive personal information. The California Privacy Protection Agency (CPPA) and Attorney General enforce it — up to $2,500 per violation, $7,500 for intentional or minors' cases, plus $100–$750 per consumer for breaches.