requires privacy notices if personal information is collected
establishes data subject requests rights
allows consumers to opt out of the sale or sharing of personal information
creates a private right of action
For Businesses:
requires businesses that collect personal information to – at or before the point of collection – inform consumers of the categories of personal information to be collected and the purposes for which the categories of personal information will be used
would not be allowed to collect additional categories of personal information or use collected personal information for additional purposes without providing the consumer with specific notice