Who Must Comply
This act is applicable to any individual or entity (corporation) that owns a commercial web page or an online service that collects and records confidential personal information from an individual living in California, visiting such web pages. This act, however, is not applicable to ISPs or similar entities who record data upon request from a third party.
In this case, confidential personal information, collected online, includes first and last names, a street address, an email address, a telephone number, a social security number, or various other data that can be used to contact a user. Personally identifiable information can include date of birth, height, weight, etc, when this information is recorded and stored online by the operator in combination with one of the above identifiers. An individual user is one seeking to or acquiring goods or services, money or credit for himself, his family, or his household.
Read more about this topic: Online Privacy Protection Act