CCPA

CCPA is California's consumer privacy law, giving that state's residents the right to know what data is collected about them and to demand that its sale or retention stop.

CCPA, like GDPR, is a regional law, not a global standard; its central lever is the “right to opt out of the sale of data” and it focuses more on the commercial trading of data than on obtaining upfront consent. For an Iranian business whose audience is inside the country, CCPA usually does not apply, but two reasons make the name worth knowing: you may fall in scope if you have California users, and many foreign tools have built their settings around this law. A point often misunderstood is that “CCPA-compliant” is not an official certification; a compliance claim should be judged by concrete actions — an opt-out mechanism, transparency of collection — not by a badge.