language: en · status: in-force · last checked: 2026-09-06

California — CCPA/CPRA as it reaches minors (§1798.120)

The CCPA's opt-out right for sale/sharing of personal information, with the minors' inversion: a business with actual knowledge a consumer is under 16 must not sell or share their personal information without affirmative authorisation — the consumer's own at 13–15, the parent's under 13 — and wilful disregard of age counts as actual knowledge (§1798.120(c)).

Applicability to EdTech

• SOPIPA-covered student data is already unsellable; §1798.120 matters for consumer-facing surfaces (home use, parent accounts) and any data flows characterised as "sharing" for cross-context behavioural advertising.
• CCPA applies to for-profit businesses meeting thresholds; check applicability before mapping duties. Nonprofits and the school itself are outside CCPA.

Contents

Related

• SOPIPA — the school-purposes regime
• CAADCA — the design-code layer (litigation-frozen)
• US COPPA — federal under-13 regime

Sources

• leginfo — Civ. Code §1798.120

Meta

Statute text reproduced verbatim from leginfo by tools/us-states/build_ca.py; verify re-checks every source paragraph.