1.
CCPA Privacy Policy
Template
CCPA PRIVACY POLICY

2.
The CCPA holds some specific
requirements for your Privacy
Policy.
You must post a conspicuous link
to your Policy on your website, and
you must update your Policy every
12 months.
You also must include the following
information within your Privacy
Policy:

3.
CCPA
Consumer
Rights

4.
Under the CCPA, consumers have
the right to:
Request access to the personal information you hold
about them
Request you delete the personal information you hold
about them
Not be discriminated against for exercising these
rights

5.
Each of these rights has specific requirements and
exceptions, so become familiar with them.

6.
How noticeable are your legal agreement links?
A “Do Not Sell My
Personal Information”
Page

7.
If your business sells consumers’
personal information, you must
create a page that discloses this
and lets users opt out of having
their information sold.
The page must be easily accessible
via a link on your website and within
your Privacy Policy.

8.
How noticeable are your legal agreement links?
Categories of
Personal Information
You Collect

9.
Where are your legal agreement links placed?
3
In your Privacy Policy, include a list
of all categories of personal
information you’ve collected over
the last 12 months.
The CCPA includes 11 categories of
what it considers to be personal
information. Become familiar with
these categories and do a self-audit
of the information you collect to
see what you must disclose.

10.
You need to disclose the categories of sources where you
get your personal information from.
For example, you may collect information directly from
users, through social media accounts, via marketing
partners or from public sources.

11.
Do you use a scroll box to display text of your
legal agreements?
Your Purposes for
Collecting Personal
Information

12.
Do you use a scroll box to display text of your
legal agreements?
You must inform your users why you collect their personal
information. Let them know how you use it, and for what
purposes.

13.
Where are your legal agreement links placed?How noticeable are your legal agreement links?
Personal
Information
You’ve Sold

14.
You must list all the categories of personal information that
you’ve sold in the last 12 months.
If you haven’t sold any, you must disclose this as well.

15.
Personal Information
You’ve Disclosed for
Business Purposes

16.
You must provide all the categories
of personal information you’ve
disclosed “for business purposes”
over the last 12 months.
If you haven’t disclosed any, you
must disclose this as well.

17.
The CCPA provides seven categories
of activities that are considered to be
“business purposes:”
1. Auditing
2. Security
3. Debugging
4. Short-term uses
5. Performing services
6. Internal research
7. Testing or improvements

18.
Don’t forget to update your
Privacy Policy every 12
months and note your Policy’s
new “effective date” even if
you don’t make any changes.