Compliance · California, United States
CCPA and CPRA
The California Consumer Privacy Act, as amended by the CPRA, gives California residents rights over their personal information. If you sell to US consumers in volume, we help you check whether it applies and, if it does, meet what it asks.
Who it applies to
Is this law relevant to you?
For profit businesses that cross the revenue or data volume thresholds and handle personal information of California residents.
Core obligations
What the law asks of you
A plain language summary. Your legal team should confirm how each point applies to your business.
- Notice at collection
- Tell consumers what you collect, and why, at the point of collection.
- Consumer rights
- Rights to know, delete, correct, and opt out of sale or sharing.
- Opt out signals
- Honour Global Privacy Control signals from the browser.
- Sensitive data limits
- Limits on how sensitive personal information is used.
- Contracts
- Required terms in contracts with service providers and contractors.
- Security
- Reasonable security procedures and practices for the data.
How we help
From gap to evidence
- Check whether the law applies
- Privacy notices and request forms
- Opt out links and GPC handling
- Vendor contract review
- Request tracking and records
Do small businesses need to comply?
Only if they cross one of the thresholds in the law. It is usually a quick check, and we can do it with you.
Request a CCPA and CPRA assessment
Regulations
Other laws we advise on
Start a conversation
Compliance that holds up in practice.
Start with a short assessment. We tell you which laws apply, what to fix first and what it will take.
A specialist replies within one working day. The first conversation is free.