What CCPA/CPRA - California Consumer Privacy Rights requires
The California Consumer Privacy Act (CCPA, effective January 1, 2020) as substantially amended by the California Privacy Rights Act (CPRA, enforceable from March 29, 2024 following litigation delays; original date July 1, 2023) is the most comprehensive U.S. state privacy law and a de facto national standard for consumer data rights. The law applies to for-profit businesses meeting any of three thresholds: annual gross revenue exceeding $25 million; buying, selling, sharing, or receiving personal information of 100,000+ consumers or households per year; or deriving 50%+ of annual revenue from selling or sharing consumer data. CPRA added: a new sensitive personal information (SPI) category with dedicated rights to limit use; the right to correct inaccurate personal information; a data retention limitation requirement (3-year limit on retaining data beyond original purpose); and the California Privacy Protection Agency (CPPA) as an independent enforcement agency with rulemaking authority. Consumer rights: access (know), deletion, correction (CPRA), opt-out of sale/sharing, limit use of SPI (CPRA), portability, and non-discrimination. Penalties: $2,500 per unintentional violation, $7,500 per intentional violation - with no statutory maximum and class action exposure for data breaches.
Pillar: Data Protection & Privacy · Authority: California Privacy Protection Agency (CPPA) · Version: 1.1.0 · Last updated:
Primary source: https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5
SHA-256 integrity: 99e477f2d78548f72332e58efcf1086554920b6729a7f9c0c699872e1ba86888
Primary Citations — 7 traced to source
- Cal. Civ. Code § 1798.100 (General Duties of Businesses that Collect Personal Information, including Notice at Collection and Data Minimization)
- Cal. Civ. Code § 1798.120 (Consumers' Right to Opt-Out of Sale or Sharing of Personal Information)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/ccpa-cpra.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/ccpa-cpra.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/ccpa-cpra
- Back to registry: Browse all 10,090 compliance nodes