What is CCPA (California Consumer Privacy Act)?
CCPA (California Consumer Privacy Act) is California's data privacy law giving residents the right to know what data companies collect and to request its deletion.
Definition
The CCPA (and its 2023 amendment, CPRA) gives California residents the right to know what personal data businesses collect, request deletion of that data, and opt out of its sale. For B2B teams, CCPA applies to business contacts because it covers 'consumers', defined broadly as California residents regardless of whether they're acting in a personal or business capacity. This means your prospect database containing California-based contacts falls under CCPA. Data providers like ZoomInfo and Apollo handle opt-out requests at scale, but the legal responsibility extends to any company using that data.
Why It Matters
CCPA violations carry penalties of $2,500 per unintentional violation and $7,500 per intentional one. Those numbers multiply fast when you're sending thousands of outbound emails. The practical impact for B2B teams: you need an opt-out mechanism for California contacts, your data providers should demonstrate CCPA compliance, and your privacy policy needs to disclose your data collection and sharing practices. Most companies handle this through their data provider's built-in compliance features, but you can't outsource the legal liability.
Example
A SaaS company receives a CCPA deletion request from a California prospect. They need to delete the contact from Salesforce, Outreach sequences, marketing automation (HubSpot), and notify their enrichment provider (ZoomInfo) to suppress the record. They also need to confirm deletion within 45 days. Companies without a documented process for handling these requests scramble. Those with CRM automation and a deletion workflow complete it in hours.