CCPA (California Consumer Privacy Act of 2018), amended by the CPRA (California Privacy Rights Act of 2020), grants California residents the right to know what personal information businesses collect, to request deletion, to opt out of sale, and to be protected from discrimination for exercising these rights.
CCPA applies to businesses meeting any of these thresholds: $25M+ revenue, processing personal data of 100,000+ California residents, or earning 50%+ of revenue from selling personal data. For customer portals serving California residents, CCPA compliance overlaps significantly with GDPR but has California-specific implementation details.