Under CCPA, which of the following actions is explicitly prohibited?

The action that is explicitly prohibited under the California Consumer Privacy Act (CCPA) is charging consumers for data access requests. The CCPA grants consumers the right to request access to the personal information that businesses collect about them without being subjected to any fees. This provision is designed to ensure that individuals can exercise their rights regarding their personal data without being financially burdened, thereby encouraging transparency and accountability among businesses.

The emphasis on free access to information aims to empower consumers to understand what data is being collected and how it is being used, promoting consumer rights and privacy. As such, any attempt by a business to impose a charge for providing this information would violate the CCPA.

In contrast, providing access to data upon request, collecting consumer data (within legal bounds), and ensuring that consumer data is stored securely are all permissible actions and reflect best practices in data management and privacy compliance under the CCPA.