CCPA / CPRA

California Consumer Privacy Act as amended by the California Privacy Rights Act, with enforcement shared by the California Privacy Protection Agency and the Attorney General. Carves out HIPAA/CMIA health data and GLBA-covered financial data, then captures everything else — employee, B2B, and consumer personal information. Attention is triggered by an unfulfilled consumer right-to-know or right-to-delete request, by a data-broker registration miss at the CPPA registry, by an unconsented sensitive personal information use, and by an opt-out signal that the front-end JS does not honor.

/ccpa-cpra