A CCPA access reply is the package you give a consumer who exercises the right to know under Cal. Civ. Code §1798.100. Before you disclose it, you strip PII that belongs to other consumers. anonym.plus marks that data on your own device.
When this applies
A California consumer asks what data you hold on them. The export pulls logs and tickets that also name other shoppers and staff.
How anonym.plus handles it
- Open the export in anonym.plus on your device.
- The tool flags names, emails, phones, and account IDs.
- Keep the requesting consumer's own data intact.
- Mark every other person's PII for removal.
- Swap or black out each flagged item.
- Save the clean export on your machine.
What you need to provide
- The data export (CSV, JSON, PDF, or document bundle).
- An operator: Replace for readable copies, Redact for full removal.
- An allow-list holding the requesting consumer's identifiers.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | other shopper → [CONSUMER] |
| Contact | EMAIL_ADDRESS | k.berg@example.com → [EMAIL] |
| Accounts | CREDIT_CARD | 4111 1111 ... → [CARD] |
| Identifiers | US_SSN | 078-05-1120 → [SSN] |
| Contact | PHONE_NUMBER | 415-555-0143 → [PHONE] |
| Location | LOCATION | ship-to address → [ADDRESS] |
Compliance achieved
- Supports a lawful right-to-know reply under CCPA (Cal. Civ. Code §1798.100).
- Hides other consumers' PII so the disclosure stays specific to the requester.
- Runs offline, so raw consumer data never reaches a vendor cloud.
- Handles CSV and JSON exports as well as document bundles.
Anonymize CCPA access replies offline — see plans & start free →
Limitations & cautions
The tool flags PII; you decide what to share. CCPA gives a consumer their own data, not other people's. Sensitive fields like full card or Social Security numbers may need extra masking under other rules. Review each flag first.
Frequently asked questions
Whose data goes into a CCPA reply?
Only the requesting consumer's personal information. Strip data tied to other consumers or staff. anonym.plus flags both so you can keep one and remove the rest.
Does it work on a bulk CSV export?
Yes. Tidy columns and free-text fields are both scanned, and a steady label map keeps rows for one person joinable after the swap.
Is anything sent to the cloud?
No. Work is local. The export stays on your device, which removes the breach risk of uploading raw consumer PII.