CCPA (California Consumer Privacy Act) logo

CCPA (California Consumer Privacy Act)

The California Consumer Privacy Act (CCPA), amended by the California Privacy Rights Act (CPRA), is a state statute that grants California residents rights over their personal information: the right to know, delete, correct, opt-out of sale/sharing, limit use of sensitive personal information, and non-discrimination for exercising privacy rights. It is enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. Technical interoperability mechanisms include the Global Privacy Control (GPC) browser signal and the IAB Tech Lab US Privacy (USP) / Global Privacy Platform (GPP) signals for advertising technology. This index tracks the official regulatory resources, technical privacy signals, and commercial APIs that help businesses comply with CCPA/CPRA obligations.

4 APIs 13 Features
CPRACaliforniaComplianceData ProtectionData Subject RightsLegalPrivacyRegulation

APIs

Global Privacy Control (GPC) Specification

Global Privacy Control is a browser-level signal that communicates a user's opt-out preference to websites. The California Attorney General has affirmed that GPC must be treated...

IAB Tech Lab Global Privacy Platform (GPP)

The IAB Tech Lab Global Privacy Platform (GPP) is the successor to the US Privacy (USP) string. It provides a standardized way to communicate user consent and opt-out signals be...

California Privacy Protection Agency (CPPA) Resources

Official resources from the California Privacy Protection Agency, the body empowered by CPRA to implement, enforce, and publish regulations under the CCPA.

California Data Broker Registry

Official California Attorney General registry of data brokers required to register under Civil Code section 1798.99.80, providing a public list that consumers can use to submit ...

Features

Notice at Collection
Privacy Policy Disclosure
Do Not Sell or Share Link
Limit Use of Sensitive PI Link
Verifiable Consumer Requests
Authorized Agent Requests
Opt-Out Preference Signal (GPC)
Service Provider / Contractor Contracts
Data Processing Addendum
Data Retention Disclosure
Risk Assessments (CPRA)
Cybersecurity Audits (CPRA)
Automated Decision-Making Disclosures (CPRA)

Use Cases

DSAR (Data Subject Access Request) Automation
Consent Management Platform (CMP)
Cookie Banner and Preference Center
Data Inventory and Mapping
Vendor Risk Management
Privacy Impact Assessments
Audit and Reporting
Global Privacy Control Handling
Data Broker Registration

Resources

🔗
Website
Website
🔗
Documentation
Documentation
🔗
Regulator
Regulator
🔗
StatuteText
StatuteText
🔗
Regulations
Regulations
💬
FAQ
FAQ
🔗
Enforcement
Enforcement
🔗
DataBrokerRegistry
DataBrokerRegistry
🔗
GPC
GPC
🔗
GPP
GPP