US-CCPA

US CCPA compliance regulation modern detailed.

Definition

US CCPA (California Consumer Privacy Act, signed September 2018, effective 1 January 2020) + CPRA (California Privacy Rights Act amendments via Proposition 24, approved November 2020, effective 1 January 2023) are the first comprehensive consumer privacy laws US precedent multiple state privacy laws (Virginia + Colorado + Connecticut + Utah + Iowa + Indiana + Tennessee + Montana + Texas + Oregon + Delaware + multiple ~20 states 2024) ; CCPA + CPRA give California residents rights notice + know + delete + opt-out of sale/sharing + correct + limit + non-discrimination ; California Privacy Protection Agency CPPA is the dedicated CPRA-created enforcer. Technical detail + application scope + compliance obligations + non-compliance sanctions + reporting processes + impact on in-scope companies + alignment with adjacent national + international regulations + governance + supervisory authorities + implementation timeline + transitions + case law + industry best practices documentation adoption.

Origin

CCPA signed September 2018 effective January 2020 ; CPRA amendments November 2020 effective January 2023 ; CPPA dedicated enforcer ; ~20 US state privacy laws 2024.

Example in context

California resident submits CCPA/CPRA Right to Know request to retail company: (1) Company verifies identity (e.g., via account login + secondary identifier), (2) Company provides comprehensive disclosure of categories of personal information collected + sources + purposes + categories of third parties shared with + specific pieces if requested + retention periods, (3) Company responds within 45 days (extendable +45 days), (4) Free of charge first request annually, (5) Provides parallel Right to Delete + Opt-out of Sale + Correct + multiple CCPA/CPRA rights similar process.

Related terms

• Brazil LGPD — comparable national privacy law.