California Consumer Privacy Act, deidentified and aggregate information are not personal information (Cal. Civ. Code 1798.140(v)(3))
Records that meet the CCPA deidentified standard fall outside the Act's personal information rules, including the rules on sale; that is why de-identification is the main lawful route for an AI licence.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
““Personal information” does not include consumer information that is deidentified or aggregate consumer information.”
Where it was read
Also read from the same source
- California Consumer Privacy Act, definition of sell (Cal. Civ. Code 1798.140(ad)(1))
- California Consumer Privacy Act, transfer in a merger, acquisition or bankruptcy is not a sale (Cal. Civ. Code 1798.140(ad)(2)(C))
- California Consumer Privacy Act, definition of deidentified (Cal. Civ. Code 1798.140(m))
- California Consumer Privacy Act, definition of service provider (Cal. Civ. Code 1798.140(ag)(1))
- California Consumer Privacy Act, right to opt out of sale or sharing (Cal. Civ. Code 1798.120(a))
- California Consumer Privacy Act, right to limit use and disclosure of sensitive personal information (Cal. Civ. Code 1798.121(a))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide