Does every website have to comply with the CCPA?

No. The CCPA applies to businesses meeting statutory definitions and thresholds, subject to exemptions and context. AllyProof asks the user to choose California but does not decide whether the operator is a covered business.

Can the Notice at Collection be inside the privacy policy?

For online collection, the notice can link directly to the specific policy section containing the required information. Sending a visitor only to the top of a long policy may not satisfy the regulation's directness requirement.

Must California notices be in English?

No. The regulations require availability in the languages in which the business ordinarily provides contracts, disclaimers, sale announcements, or similar consumer information.

Legal & Compliance

California Privacy Policy and Notice at Collection

California separates the privacy policy, which describes online and offline practices and consumer rights, from the Notice at Collection, which gives timely information at or before collection.

What the notices cover

The current CCPA regulations specify privacy-policy disclosures including categories of personal information, sources, purposes, third parties, rights, request methods, sale/sharing and sensitive-information practices where relevant, and the policy's last-updated date. The Notice at Collection focuses on the categories collected, purposes, retention, sale/sharing, and links to relevant choices and the privacy policy.

Section 7003 also requires notices to be easy to read and understand, available in the languages the business ordinarily uses for relevant consumer communications, and reasonably accessible to people with disabilities.

What AllyProof checks

A California-region browser discovers likely privacy pages across languages, reads visible content, and looks for selected disclosure categories, request methods, an update date, and a Notice at Collection near collection points. A textual match is preliminary evidence: automation cannot establish the operator's statutory coverage, validate every category against internal systems, or prove a request channel works end to end.

Official sources

The CCPA's applicability and required disclosures depend on the business, data practices, consumers, and exemptions. The check reviews a public regulatory surface, not internal compliance.

Common questions

Does every website have to comply with the CCPA?: No. The CCPA applies to businesses meeting statutory definitions and thresholds, subject to exemptions and context. AllyProof asks the user to choose California but does not decide whether the operator is a covered business.
Can the Notice at Collection be inside the privacy policy?: For online collection, the notice can link directly to the specific policy section containing the required information. Sending a visitor only to the top of a long policy may not satisfy the regulation's directness requirement.
Must California notices be in English?: No. The regulations require availability in the languages in which the business ordinarily provides contracts, disclaimers, sale announcements, or similar consumer information.

Want to review these signals on your own website?

Run a free compliance check