What should websites include in their Privacy Policy to be CCPA compliant?

Your website must:

• Inform its users at or before the point of data collection about the categories of personal information that it collects and for what purposes.
• Feature a Do Not Sell My Personal Information link that users can use to opt out of third-party data sales.
• Update its privacy policy to include a description of the consumer’s rights and how to exercise these rights.
• Contain an annually updated list of the categories of personal information that your company collects, sells and discloses.
• Obtain their opt-in (consent) before you are allowed to sell or disclose their personal information to third parties, if users are under the age of 16.
• Obtain their opt-in (consent) from a parent or legal guardian, if users are under the age of 13.
• Provide the consumer (free of charge) the records of personal information collected in the past 12 months, if your business receives a verifiable request from a consumer asking for disclosure of their personal information that is collected.

‍

Failure to comply with the CCPA can result in fines for businesses of $7,500 per violation and $750 per affected user in civil damages for businesses.