Can a business charge you more for exercising your CCPA rights?

Founders worry that honoring an opt-out means losing the ability to charge for a product, and that a privacy request has to break the business model. The CCPA draws a clearer line than that. You cannot punish someone for using a right. You can still run loyalty programs and paid tiers, and you can offer a genuine value exchange for data, as long as it is transparent and consensual. Section 1798.125 is where that line sits.

What counts as discrimination under the CCPA?

Under California Civil Code section 1798.125(a)(1), a business shall not discriminate against a consumer because the consumer exercised any CCPA right. The statute names specific forms: denying goods or services, charging different prices or rates including through discounts, benefits, or penalties, providing a different level or quality of goods or services, or suggesting the consumer will receive a different price or quality. It also bars retaliating against an employee, applicant, or independent contractor for exercising their rights. If a consumer opts out of a sale and you respond by degrading their service, that is the conduct the section forbids.

When is a price difference allowed?

The law is not a flat ban on charging differently. Section 1798.125(a)(2) permits a business to charge a different price or offer a different quality if that difference is reasonably related to the value provided to the business by the consumer's data. Section 1798.125(a)(3) confirms that loyalty, rewards, premium features, discounts, and club-card programs are fine when they are consistent with the CCPA. The test is the connection to data value, not whether money changes hands. Document that link, because a price gap you cannot explain in those terms is where this rule bites.

How do financial incentives work?

Section 1798.125(b) lets you offer financial incentives, including payments to consumers, for the collection, sale, sharing, or retention of personal information, and lets you offer a different price or quality reasonably related to the data's value. It comes with conditions. You must notify consumers of the incentive, obtain opt-in consent that the consumer can revoke at any time, and you cannot use incentive practices that are unjust, unreasonable, coercive, or usurious. An incentive is a consented value exchange, not a penalty dressed up as a discount. Where a consumer has told you to stop selling or sharing their data, honor that first.

Why this matters for enforcement

Non-discrimination is easy to breach by accident, through a pricing rule or a retention setting that quietly treats opted-out users worse. The exposure is real, and the CCPA fines and penalties page shows what an administrative action can cost. Knowing whether the law even reaches you comes first, which the California privacy overview explains through the thresholds.

Next step

If you run tiered pricing, discounts, or a rewards program and are not sure it clears the non-discrimination rule, the free 2-minute Obligation Scan checks whether the CCPA applies to you and flags the duties most likely to draw enforcement. The US state privacy laws hub sets the wider picture across states.