Maybe. California's Consumer Privacy Act (CCPA) sets certain criteria a website owner must meet. From the state government's perspective, it's about protecting the privacy rights of Californians. As a general rule, a website privacy policy should either explain why the site is exempt from CCPA or how the website owner is complying with that law.