The California Consumer Privacy Act (CCPA) is a state statute intended to enhance privacy rights for residents of California. To be CCPA compliant organizations are required to “implement and maintain reasonable security procedures and practices” in protecting consumer data.