You need to inform consumers about any personal information that will be collected, how it is categorized, and how it is intended to be used.
We'd recommend finding a consent management platform to help you collect and handle personal information in a way that is compliant with GDPR, CCPA, and other major privacy laws. In addition to informing users about how their personal information will be used, you need to store it in a secure and searchable repository. Osano's consent manager happens to be the most widely used one on the planet.
A full breakdown of the CCPA regulations can be found here.