← Industry guides
Retail & restaurant chains
CCPA requirements for multi-location retailers and restaurants
Loyalty programs, online ordering, and location-level marketing tags multiply the places personal information flows. Each location page is another place the opt-out has to work.
Common gaps on chain websites
These usually come from third-party platforms layered onto the main website.
- Opt-out link present on the corporate site but missing on online-ordering or location microsites (Civ. Code §1798.135).
- Loyalty and ordering platforms that ignore Global Privacy Control signals (11 CCR §7025).
- Privacy policy last updated more than 12 months ago (Civ. Code §1798.130(a)(5)).
- Franchise or vendor agreements missing required purpose-limitation terms.
Fines are counted per violation
The CPPA may impose administrative fines of up to $2,663 per violation, or $7,988 per intentional violation or violation involving minors' information, as adjusted for inflation. Monitoring is about catching broken mechanisms early, not about guaranteeing an outcome.
Primary sources
- CCPA statute text (Civ. Code §1798.100 et seq.), effective Jan 1, 2026 — cppa.ca.gov
- CPPA — Updated Monetary Thresholds in CCPA (Civ. Code §1798.199.95(d))
- CPPA — California Consumer Privacy Act Regulations (Cal. Code Regs., tit. 11, §7000 et seq.)
Everproof provides compliance software and operations support. It is not a law firm and does not provide legal advice. Using Everproof does not guarantee compliance or prevent fines.