Skip to main content

← Back to glossary

Term · 28. International Regulations

CCPA / CPRA (California Consumer Privacy Act / Privacy Rights Act) CCPA

Law Source: CCPA / CPRA
Personal Data Standards CCPA GDPR

Definition

California state privacy law (CCPA 2018, expanded by CPRA 2020 effective 2023) granting California residents rights over their personal information: access, deletion, correction, opt-out of sale/sharing, and opt-out of automated decision-making. For IDM/IAM: requires consent management, identity verification before fulfilling consumer rights requests (CRR), audit logs of access to PI, and contractual terms with service providers.

Synonyms
  • California Consumer Privacy Act
  • California Privacy Rights Act
Application
Affects any business serving California residents with 100k+ records or $25M+ annual revenue. IDM impact: identity-proof requesters before responding to CRR; automated workflows for deletion across all systems; data-mapping to know where California-resident PI lives. Comparable to GDPR Article 12-22.
Sources

Related terms

← Back to glossary  ·  Open in main list