See point 7 at https://oag.ca.gov/privacy/ccpa