What are the exceptions to CCPA?