{"object_type":"business_agent","schema_version":1,"title":"CCPA consumer requests","core":{"id":"agent:us:business:ccpa-consumer-requests","jurisdiction":"us","domain":"privacy","question":"Does the California privacy law apply to my business?","affected_business":["Online retailer","Online service","SME"],"applies_when":"For-profit businesses doing business in California that meet a revenue threshold, buy, sell or share personal information of 100,000 or more consumers or households, or derive 50 percent or more of revenue from selling or sharing it.","decision":"If one threshold is met, consumers' rights to know, delete, correct and opt out must be honoured.","obligation":"Provide a privacy notice, at least two request methods and a 'Do Not Sell or Share' link where applicable.","action":["Check the three thresholds","Publish the privacy notice","Set up request channels","Answer verified requests"],"deadline":"Respond to a verifiable consumer request within 45 days, extendable once by 45 days with notice.","sources":[{"provision":"Cal. Civ. Code 1798.140(d)","url":"https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.140"},{"provision":"Cal. Civ. Code 1798.130(a)(2)","url":"https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.130"}],"read_at":"2026-10-15"},"sha256":"760886e3b35050f087d5558113e4ab924a8447349ae138f43a9e8829f6ea08da","fields":["affected_business","decision","obligation","risk","action","deadline","verification"],"affected_business":["Online retailer","Online service","SME"],"applies_when":"For-profit businesses doing business in California that meet a revenue threshold, buy, sell or share personal information of 100,000 or more consumers or households, or derive 50 percent or more of revenue from selling or sharing it.","decision":"If one threshold is met, consumers' rights to know, delete, correct and opt out must be honoured.","obligation":"Provide a privacy notice, at least two request methods and a 'Do Not Sell or Share' link where applicable.","risk":{"risk_level":"medium","risk_factors":["civil_penalty_per_violation"],"current_amounts":"https://cppa.ca.gov/regulations/"},"action":["Check the three thresholds","Publish the privacy notice","Set up request channels","Answer verified requests"],"deadline":"Respond to a verifiable consumer request within 45 days, extendable once by 45 days with notice.","verification":{"sha256":"760886e3b35050f087d5558113e4ab924a8447349ae138f43a9e8829f6ea08da","read_at":"2026-10-15","sources":["https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.140","https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.130"],"source":"Source: NovaCopilot"},"next_questions":["What counts as selling or sharing under the CCPA?","Do I need parental consent to collect data from children?","What must a clinic do after a health data breach?","Must I report a data breach to the authority?","Does my small company need a GDPR processing register?"],"related":[{"id":"agent:eu:business:gdpr-access-request","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:gdpr-access-request"},{"id":"agent:eu:business:gdpr-breach-72h","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:gdpr-breach-72h"},{"id":"agent:eu:business:gdpr-records","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:gdpr-records"},{"id":"agent:us:business:coppa-parental-consent","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:us:business:coppa-parental-consent"},{"id":"agent:us:business:hipaa-breach-notification","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:us:business:hipaa-breach-notification"},{"id":"agent:us:business:privacy-access-request","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:us:business:privacy-access-request"},{"id":"agent:us:business:privacy-consumer-request","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:us:business:privacy-consumer-request"},{"id":"agent:us:business:privacy-deletion","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:us:business:privacy-deletion"},{"id":"agent:us:business:privacy-notice","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:us:business:privacy-notice"},{"id":"agent:us:business:privacy-opt-out","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:us:business:privacy-opt-out"}],"related_count":14,"page":"https://legal.exploreworldai.com/en/business-agents/us-ccpa-consumer-requests","version":"760886e3b35050f0","updated_at":"2026-10-15","first_published":"2026-10-14","changes_url":"https://legal.exploreworldai.com/api/public/v1/business-agent-changes","note":"Not legal advice. Verify each answer against the cited provision. Missing facts are not_in_register.","attribution":"Source: NovaCopilot","versions":{"model":"1.0","agent_version":"fba3295aacdb8f56","risk_version":"792cf09f13b5bfb1","decision_version":"fef24295f234e3a5","package_version":"25e3777775c02d5a","change_score":0,"changed_dimensions":[],"changed_at":"2026-10-14","verified_at":"2026-10-15","next_check":"2026-10-22","is_current":true,"supersedes":[],"verify_url":"https://legal.exploreworldai.com/api/public/v1/versions/verify?id=agent%3Aus%3Abusiness%3Accpa-consumer-requests","changes_url":"https://legal.exploreworldai.com/api/public/v1/living-versions","note":"change_score measures freshness only, never ranking.","impact":"not_in_register"},"withheld":{"links_full":14,"risk_model":3},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"decision","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-04T20:15:22.642Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent%3Aus%3Abusiness%3Accpa-consumer-requests","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1818}}