CCPA/CPRA
Regulation Sections (7)
-
CCPA §1798.100 — General Duty to Disclose
A consumer shall have the right to request that a business that collects a consumer's personal information disclose to that consumer the categories and specific…
-
CCPA §1798.105 — Right to Deletion
A consumer shall have the right to request that a business delete any personal information about the consumer which the business has collected from the consumer…
-
CCPA §1798.110 — Right to Know What Is Collected
A consumer shall have the right to request that a business that collects personal information about the consumer disclose: the categories of personal informatio…
-
CCPA §1798.120 — Right to Opt-Out of Sale or Sharing
A consumer shall have the right, at any time, to direct a business that sells personal information about the consumer to third parties not to sell the consumer'…
-
CCPA §1798.121 — Right to Limit Use of Sensitive Personal Information
A consumer shall have the right, at any time, to direct a business that collects sensitive personal information about the consumer to limit its use of the consu…
-
CCPA §1798.140 — Definitions
"Business" means a sole proprietorship, partnership, limited liability company, corporation, or other legal entity that collects consumers' personal information…
-
CCPA §1798.150 — Private Right of Action
Any consumer whose nonencrypted and nonredacted personal information is subject to an unauthorized access and exfiltration, theft, or disclosure as a result of …
Guidance Articles (3)
-
California Consumer Rights Under CPRA: What Businesses Must Do
California Consumer Rights Under CPRA: What Businesses Must DoThe California Privacy Rights Act (CPRA), which builds on and significantly expands the California…
-
CCPA Opt-Out Rights: Implementation Guide for Businesses
Understanding CCPA Opt-Out Rights The California Consumer Privacy Act (CCPA) and its successor, the California Privacy Rights Act (CPRA), grant consumers the ri…
-
CCPA vs GDPR: Key Differences for Multinational Companies
CCPA vs GDPR: Key Differences for Multinational Companies If your organization collects personal data from both California residents and EU citizens, you're na…
Checklists (1)
-
CCPA Compliance Checklist for California Businesses
The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) establish comprehensive privacy obligations for businesses collecting person…
Enforcement Cases (2)
-
Amazon Ring — Employee Surveillance FTC Settlement ($5.8M)
The FTC settled with Ring LLC (an Amazon subsidiary) for $5.8 million and a comprehensive order following allegations that Ring allowed employees and contractor…
-
Twitter/X — Repurposing Security Data for Ads FTC Settlement ($150M)
The FTC and DOJ reached a $150 million penalty settlement with Twitter for violating a 2011 FTC order and deceiving users about how their phone numbers and emai…