5) categories of third parties to whom the personal information was sold or disclosed. and 6) the business or commercial purpose for collecting or selling personal information.<br> <br> The CCPA permits requests to know from the same consumer up to twice in a twelve (12) month period.