California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (Proposition 24)

CCPA/CPRA
active

California's comprehensive consumer privacy law. It gives California residents rights to know, delete, correct, opt out of the sale or sharing of their personal information, and limit the use of sensitive personal information, and it bars retaliation for exercising those rights. Proposition 24 (the CPRA, approved November 3, 2020) amended the law, created the California Privacy Protection Agency, and made most changes operative January 1, 2023.

Jurisdiction

California

Jurisdiction Type

state

Country

United States

Effective Date

1/1/2020

Enforcing Authority

California Privacy Protection Agency (administrative enforcement; now styled CalPrivacy) and California Attorney General (civil actions)

Maximum Fine

Up to $7,500 per intentional violation; $2,500 per unintentional

Fines Under This Regulation

0

Total Fine Amount (USD)

--

Privacy Topics

consumer_rightsright_to_knowright_to_deleteopt_out_saledata_brokerssensitive_data

Key Articles

ArticleDescription
§1798.100Right to know
§1798.105Right to delete
§1798.110Right to disclosure
§1798.115Right to opt-out of sale
§1798.120Right to opt-out
§1798.125Non-discrimination
§1798.130Notice and request procedures
§1798.135Do Not Sell link
§1798.140Definitions
§1798.155Administrative fines