Organization
Entity subject to CPPA obligations.
Definitions (2)
A legal person, corporation, partnership, association, or other entity that collects, uses, discloses, or manages personal information in the course of commercial activities and is therefore subject to CPPA requirements such as privacy management programs, consent rules, and breach reporting.
An entity that collects, uses or discloses personal information in the course of commercial activities; the statutory obligations, accountability duties and enforcement powers in the CPPA largely apply to organizations as defined. This captures private‑sector actors subject to the Act's compliance requirements.
Related Terms
Commercial activity
Business, trade, or commercial operations....
Personal information processor
Entity determining purposes and means of personal data processing....
business operator handling personal information
An entity engaged in handling personal information in the course of business....
personal information controller/processor
Entities determining purposes/means or processing on behalf of controllers....
Personal information processor (PIP)
Entity that processes personal data on behalf of a controller....