Even if your small business is entirely exempt from the heavy regulations of the CCPA, you are almost certainly required to comply with the California Online Privacy Protection Act (CalOPPA). CalOPPA applies broadly to any commercial website or online service that collects Personally Identifiable Information (PII), such as names, email addresses, or phone numbers, from California residents.
This means if your website features a simple “Contact Us” form, an email newsletter signup, or an online booking system, CalOPPA applies to your business.
The law requires you to conspicuously post a structured Privacy Policy on your website detailing exactly what information is collected, with whom it is shared, and how users are notified of policy changes.
Failure to do so can result in immediate enforcement actions by the California Attorney General.
