California, USA
CCPA
The California Consumer Privacy Act, as amended by the CPRA, gives California residents rights over the personal information businesses collect about them, including the right to know, delete, correct, and opt out of sale or sharing.
9 sections
Right to know about collection of personal information
Consumers have the right to know what personal information a business collects and how it is used and shared.
Right to delete personal information
Consumers have the right to request deletion of personal information collected by a business.
Right to know what personal information is sold or shared
Consumers have the right to know what personal information is sold or shared and to whom.
Right to opt-out of sale or sharing of personal information
Consumers have the right to direct a business to not sell or share their personal information.
Right to limit use of sensitive personal information
Consumers have the right to limit the use and disclosure of their sensitive personal information.
Notice, disclosure, correction, and deletion
Businesses must disclose their data practices in a privacy policy and respond to consumer requests within 45 days.
Notice, disclosure, correction, and deletion - additional requirements
Businesses must provide a clear and conspicuous link titled Do Not Sell or Share My Personal Information on their homepage.
Definitions
Key definitions including personal information, sensitive personal information, sale, sharing, and business purpose.
Private right of action for data breaches
Consumers have a private right of action for data breaches with statutory damages of $100-$750 per consumer per incident.
Turn CCPA into tracked tasks
eurocompliant maps these obligations to checklists and evidence, so you can prove compliance instead of re-reading the text.
Start free trial