CCPA

23/09/2025

Author: Stuart Barker | ISO 27001 Expert and Thought Leader

California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act, or CCPA, is a law that gives people in California more control over the personal information that businesses collect about them. It helps protect a person’s privacy.

Examples

  • A right to know: You can ask a company what personal information it has about you. This includes things like your name, address, and what you’ve bought.
  • A right to delete: You can ask a company to delete your personal information. If you don’t want a business to have your data anymore, you can tell them to get rid of it.
  • A right to say no: You can tell a company not to sell your personal information. They can’t sell your data to other companies if you say no.
  • Equal service and price: Businesses can’t charge you more or give you worse service just because you used your privacy rights.

Context

The CCPA was created because many businesses collect and use a lot of personal information. This data can include your online habits and location. This law was made to give people a say in how their data is used. It’s similar to laws in other places, like Europe’s GDPR. The CCPA is a big step for digital privacy in the United States.

About the author

Stuart Barker is an information security practitioner of over 30 years. He holds an MSc in Software and Systems Security and an undergraduate degree in Software Engineering. He is an ISO 27001 expert and thought leader holding both ISO 27001 Lead Implementer and ISO 27001 Lead Auditor qualifications. In 2010 he started his first cyber security consulting business that he sold in 2018. He worked for over a decade for GE, leading a data governance team across Europe and since then has gone on to deliver hundreds of client engagements and audits.

He regularly mentors and trains professionals on information security and runs a successful ISO 27001 YouTube channel where he shows people how they can implement ISO 27001 themselves. He is passionate that knowledge should not be hoarded and brought to market the first of its kind online ISO 27001 store for all the tools and templates people need when they want to do it themselves.

In his personal life he is an active and a hobbyist kickboxer.

His specialisms are ISO 27001 and SOC 2 and his niche is start up and early stage business.