Which of the following is a key requirement of the California Consumer Privacy Act (CCPA)?

The California Consumer Privacy Act (CCPA) establishes several rights and responsibilities concerning the handling of personal data. One of the most significant requirements of the CCPA is that consumers have the right to know what personal data is being collected about them. This provision aims to enhance transparency and allow consumers to make informed decisions about their personal information.

Under the CCPA, businesses are obligated to provide consumers with specific details regarding the categories of personal data collected, the purposes for which the data is used, and the third parties with whom the data is shared. This empowers consumers to understand the scope of data collection and encourages companies to be more accountable in their data practices.

The other options do not represent key requirements of the CCPA. For instance, the law does not mandate that organizations must share personal data with third parties, nor does it require companies to appoint a data protection officer (DPO). Additionally, there is no stipulation in the CCPA regarding a minimum data storage duration of five years. Thus, option B accurately reflects a core aspect of consumer rights under the CCPA.