{"id":1806,"date":"2024-02-06T15:18:53","date_gmt":"2024-02-06T21:18:53","guid":{"rendered":"https:\/\/trustarc.com\/?post_type=regulations&#038;p=1806"},"modified":"2025-06-24T17:33:00","modified_gmt":"2025-06-24T22:33:00","slug":"ccpa-cpra","status":"publish","type":"regulations","link":"https:\/\/trustarc.com\/regulations\/ccpa-cpra\/","title":{"rendered":"California Consumer Privacy Act (CCPA)"},"content":{"rendered":"\t\t<section id=\"block_954b7040d0bfb6c23ee553acbe20360c\" class=\"hero-section-colors text-center bg-navy-gradient\">\n\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t<span class=\"sub-title block font-bold \">Regulation<\/span>\n\t\t\t\t\t\t\t\t\t\t<h1>California Consumer Privacy Act (CCPA)<\/h1>\n\t\t\t\t\t<p>California\u2019s comprehensive privacy law creates data privacy rights for Californians and data protection obligations for organizations. If your organization collects personal data from consumers, employees, or customers, it\u2019s crucial to understand and adhere to these obligations to avoid fines\/penalties under CCPA regulations.<\/p>\n\t\t\t<\/div>\n\t\t<\/section>\n\t\t\n\n\t\t<section id=\"block_9c83e68807ff93f05566d1281b13048e\" class=\"news-content\" style=\"padding-bottom:0;\">\n\t\t\t<div class=\"container\">\n\t\t\t\t<h2 style=\"text-align: center\">Are you subject to the CCPA?<\/h2>\n<p style=\"text-align: center\">The California Consumer Privacy Act applies to any organization and vendor who does business in California and meets any one of the following criteria.<\/p>\n<p style=\"text-align: center\"><strong>Answering \u201cyes\u201d to any of the three questions below impacts your organization.<\/strong><\/p>\n\t\t\t<\/div>\n\t\t<\/section>\n\t\t\n\n\t\t<section id=\"block_eb23625a928b93abc47debb87e927c03\" class=\"callouts-section\" style=\"\">\n\t\t\t\t\t\t\t<div class=\"callout-slider-wrap\">\n\t\t\t\t\t<div class=\"slick-slider callout-slider\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div>\n\t\t\t\t\t\t\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"callout is-card\">\n\t\t\t\t\t\t\t\t\t\t\t<blockquote>\n\t\t\t\t\t\t\t\t\t\t\t\t<p style=\"text-align: center\">Does my company generate over $26,635,000 annual gross revenue?<\/p>\n\t\t\t\t\t\t\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div>\n\t\t\t\t\t\t\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"callout is-card\">\n\t\t\t\t\t\t\t\t\t\t\t<blockquote>\n\t\t\t\t\t\t\t\t\t\t\t\t<p style=\"text-align: center\">Does my company process data of over 100,000 California consumers, households, or devices?<\/p>\n\t\t\t\t\t\t\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div>\n\t\t\t\t\t\t\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"callout is-card\">\n\t\t\t\t\t\t\t\t\t\t\t<blockquote>\n\t\t\t\t\t\t\t\t\t\t\t\t<p style=\"text-align: center\">Does my company derive 50% of annual gross revenue from the sale or share of personal information?<\/p>\n\t\t\t\t\t\t\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<div class=\"dots-container\">\n\t\t\t\t\t\t<ul class=\"slick-dots\"><\/ul>\n\t\t\t\t\t\t<button class=\"play\">play<\/button>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/section>\n\t\t\n\n\t<section id=\"block_88b423c2085d3164b049464ae6af5d52\" class=\"columns-two\" style=\"padding-top:0;padding-bottom:0;\">\n\t\t<div class=\"container\">\n\t\t\t\t\t\t\t<div class=\"heading text-center max-width\">\n\t\t\t\t\t\t\t\t\t\t\t<h2>Obligations &amp; rights under the CCPA<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"block h5\">This data privacy and protection law requires organizations to ensure appropriate opt-out mechanisms are in place (e.g. Do Not Sell\/Share opt-out links), notice requirements, and vendor management requirements while providing Californians with the ability to exercise six individual CCPA rights.\r\n<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"col-wrap\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"col\">\n\t\t\t\t\t\t\t<h4>Consents &amp; opt-outs<\/h4>\n<p>The CCPA outlines several consumer request and opt-outs requirements. Such as parental or guardian consent to share data from minors under 13 years old, and affirmative consent from minors between 13 and 16 years old. A company\u2019s website homepage must require a \u201cDo Not Sell or Share My Personal information\u201d link. An organization must also include opt-outs for targeted advertising, sales, and the right to limit use of and disclosure of sensitive personal information.<\/p>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"col\">\n\t\t\t\t\t\t\t<h4>Data subject rights &amp; requests<\/h4>\n<p>Businesses must be able to fulfill and address user requests within 45 days. Data subject requests include the request to know what personal information has been collected, request to delete any personal information collected, request to opt out of the sale of their personal information, request to correct inaccurate personal information, and the request to limit use and disclosure of sensitive personal information such as driver&#8217;s license number, passport number, religious or philosophical beliefs, health insurance information, and biometric information.<\/p>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/section>\n\t\n\n\t<section id=\"block_c5a3a7d66744e1f291f4f9587eac3792\" class=\"columns-two\" style=\"padding-top:0;\">\n\t\t<div class=\"container\">\n\t\t\t\t\t\t<div class=\"col-wrap\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"col\">\n\t\t\t\t\t\t\t<h4>Policies &amp; notices<\/h4>\n<p>Privacy policies must be regularly updated every 12 months with required information and be easily accessible, with alternative formats for accessibility clearly called out.<\/p>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"col\">\n\t\t\t\t\t\t\t<h4>Vendor management<\/h4>\n<p>Under the California Consumer Privacy Act (CCPA), businesses must perform regular reviews of third-party vendors and have contracts in place to ensure continued regulatory compliance. Includes annual cybersecurity audit and risk assessments.<\/p>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/section>\n\t\n\n\t\t<section id=\"block_66273508ca458c595b5828f74efc0f44\" class=\"cta-section has-gradient-navy color-white\">\n\t\t\t<div class=\"bg\">\n\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/bg-cta-rectangles-blue.png\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/bg-cta-rectangles-blue.png 1440w, https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/bg-cta-rectangles-blue-300x102.png 300w, https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/bg-cta-rectangles-blue-1024x347.png 1024w, https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/bg-cta-rectangles-blue-768x260.png 768w\" sizes=\"(max-width: 1440px) 100vw, 1440px\" \/>\t\t\t<\/div>\n\t\t\t<div class=\"container\">\n\t\t\t\t<div class=\"text-block\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"block h6\">Whitepaper<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<h2 class=\"h1\">Guide to Data Inventory and Mapping for GDPR &amp; CCPA Compliance<\/h2>\n\t\t\t\t\t\t<p>One of the most important steps to design and build a data privacy program is to create a data inventory of all of the business processes within an organization.<\/p>\n\t\t\t\t\t\t<ul class=\"btn-list\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t<a href=\"\/resource\/guide-to-data-inventory-and-mapping-for-gdpr-ccpa-compliance\/\" class=\"btn\"><span>Download now<\/span><\/a>\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/section>\n\t\t\n\n\t\t<section id=\"block_18f38f877b7792dc584f733f353a7b3a\" class=\"features-section\">\n\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t<div class=\"max-width text-center\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<h2>Achieve CCPA Compliance with TrustArc<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<div class=\"feature-w-images\">\n\t\t\t\t\t\t<ul class=\"list-w-links\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"\/products\/privacy-data-governance\/data-inventory-mapping\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"h6 block\">Protecting personal or sensitive data<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\tAutomate with TrustArc Data Mapping &amp; Risk Manager. Record and document personal data processes and general activities associated.\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"arrow\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/icon-arrow.svg\" alt=\"\" \/>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"\/solutions\/data-mapping-vendor-risk-management\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"h6 block\">Mitigating risks with vendors<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\tTrustArc\u2019s AI-algorithm reviews specific risk variables, scores, and recommends necessary risk assessment (e.g., PIA, DPIA, etc.) for a mitigation plan. Use pre-built assessments and data mapping to map and track PI, SPI, and vendor risk.\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"arrow\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/icon-arrow.svg\" alt=\"\" \/>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"\/products\/consent-consumer-rights\/individual-rights-manager\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"h6 block\">Exercising individual rights<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\tDSAR automation operationalizes individual rights and saves times with automated workflows.\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"arrow\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/icon-arrow.svg\" alt=\"\" \/>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"\/products\/privacy-data-governance\/privacycentral\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"h6 block\">Demonstrate CCPA compliance<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\tIdentify gaps and track compliance. PrivacyCentral assesses regulation specifics and automatically provides guidance on building out a sustainable privacy program.\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"arrow\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/icon-arrow.svg\" alt=\"\" \/>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<div class=\"img-area\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/03\/img-regulations-generic.png\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/03\/img-regulations-generic.png 644w, https:\/\/trustarc.com\/wp-content\/uploads\/2024\/03\/img-regulations-generic-300x220.png 300w\" sizes=\"(max-width: 644px) 100vw, 644px\" \/>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\n\n\t\t<section id=\"block_afa140975c58f3ac6ac258c9d0e1b558\" class=\"accordions-section\" style=\"\">\n\t\t\t<div class=\"container\">\n\t\t\t\t<div class=\"max-width\">\n\t\t\t\t\t\t\t\t\t\t  <h2>CCPA\/CPRA FAQ<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t<ul class=\"accordion\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t<a href=\"#\" class=\"opener\"><h3>What is the California Privacy Rights Act (CPRA) and how is it related to the California Consumer Privacy Act (CCPA)?<\/h3><\/a>\n\t\t\t\t\t\t\t\t\t<div class=\"slide\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"slide-wrap\">\n\t\t\t\t\t\t\t\t\t\t\t<p>The CPRA is an amendment to the CCPA law that adds additional consumer privacy rights and obligations for businesses. It also established the agency (California Privacy Protection Agency) to implement and enforce the law, while educating the public on their rights and obligations under the law. The CPRA amendments to the CCPA went into effect on January 1, 2023.<\/p>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t<a href=\"#\" class=\"opener\"><h3>Who has privacy rights under the CCPA?<\/h3><\/a>\n\t\t\t\t\t\t\t\t\t<div class=\"slide\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"slide-wrap\">\n\t\t\t\t\t\t\t\t\t\t\t<p>The CCPA provides privacy rights to California residents including residents who are employees or job applicants, and contacts for business customers, vendors, or independent contractors.<\/p>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t<a href=\"#\" class=\"opener\"><h3>What is personal information and sensitive personal information under the CCPA?<\/h3><\/a>\n\t\t\t\t\t\t\t\t\t<div class=\"slide\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"slide-wrap\">\n\t\t\t\t\t\t\t\t\t\t\t<p>Personal information is information that identifies, relates to, or could reasonably be linked to a particular consumer of a household. Examples include a first and last name, email address, geolocation data, fingerprints, and internet browsing history.<\/p>\n<p>Sensitive personal information includes examples like social security number, driver\u2019s license number, precise location, genetic data, biometric information, racial or ethnic origin, information about a consumer\u2019s health, religious beliefs, and citizenship or immigration status. Under CCPA, consumers have the right to limit a business\u2019s use and disclosure of their sensitive personal information.<\/p>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/section>\n\t\t\n\n\t\t<section id=\"block_d8a21e8410254ac5810e7accf7faaad7\" class=\"resource-section bg-light-grey\">\n\t\t\t<div class=\"container\">\n\t\t\t<div class=\"resource-head\">\n\t\t\t\t\t\t\t<h2>Related resources<\/h2>\n\t\t\t\t<a href=\"\/resources\/\" class=\"cta block\">View all resources<\/a>\t\t<\/div>\n\t\t\t\t\t\t<ul class=\"resource-lists \">\n\t\t\t\t\t\t\t<li>\n\t\t\t\t\t<a href=\"https:\/\/trustarc.com\/resource\/webinar-beyond-the-button-consent-as-a-regulatory-entry-point\/\" class=\"resource-single has-icon Webinars\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"img-holder\">\n\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"380\" height=\"120\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/01\/res-feat-rect-blue-test-380x120.png\" class=\"attachment-380x120 size-380x120 wp-post-image\" alt=\"\" \/>\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"resource-label uppercase\">Webinars and Videos<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>April 28, 2026 &#8211; TrustArc + IAPP: Beyond the Button &#8211; Consent as a Regulatory Entry Point<\/h4>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t<a href=\"https:\/\/trustarc.com\/resource\/ccpa-compliance-checklist\/\" class=\"resource-single\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"img-holder\">\n\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"380\" height=\"120\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/01\/res-feat-plus-pink-test-380x120.png\" class=\"attachment-380x120 size-380x120 wp-post-image\" alt=\"\" \/>\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"resource-label uppercase\">Infographics<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>CCPA Compliance Checklist<\/h4>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t<a href=\"https:\/\/trustarc.com\/resource\/lessons-ccpa-enforcement-actions\/\" class=\"resource-single\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"img-holder\">\n\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"380\" height=\"120\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/res-feat-woven-pink-380x120.png\" class=\"attachment-380x120 size-380x120 wp-post-image\" alt=\"\" \/>\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"resource-label uppercase\">Articles<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>California&#8217;s Privacy Watchdogs Are Biting: Key Lessons from Recent CCPA Enforcement Actions<\/h4>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t<\/div>\t\t<\/section>\n\t\t\n\n\t\t<section id=\"block_4e91e210d25a71cf819babc1aae9dcf0\" class=\"columns-one text-center bg-light-grey\" style=\"padding-top:0;padding-bottom:0;overflow:hidden;\">\n\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t<p style=\"font-size:80%\"><strong>The information provided does not, and is not intended to, constitute legal advice.<\/strong> Instead, all information, content, and materials presented are for general informational purposes only.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\n\n\t\t<section id=\"block_92254cafb9fd4d1f9cf41bb9d5787005\" class=\"code-block-2\" style=\"padding-top:0;padding-bottom:0;\">\n\t\t\t<div class=\"container\">\n\t\t\t\t<style>\r\n  .cta-bg {\r\n    position: relative;\r\n    color: white;\r\n    z-index: 0;\r\n    padding-bottom: 60px; \r\n  }\r\n\r\n  .cta-bg::before {\r\n    content: '';\r\n    position: absolute;\r\n    top: 0; left: 0; right: 0; bottom: 0;\r\n    background-image: url('\/wp-content\/uploads\/2024\/02\/bg-cta-rectangles-blue.png');\r\n    background-size: cover;\r\n    background-position: center;\r\n    background-repeat: no-repeat;\r\n    background-color: rgba(0, 0, 0, 0.2); \r\n    background-blend-mode: darken;\r\n    z-index: -1;\r\n  }\r\n\r\n   .desktop-margins {\r\n    margin-left: -200px;\r\n    margin-right: 300px;\r\n  }\r\n\r\n  @media (max-width: 767px) {\r\n    .desktop-margins {\r\n      margin-left: 0;\r\n      margin-right: 0;\r\n    }\r\n\r\n    .cta-bg a.btn {\r\n      margin-top: 30px; \/* adds space above the button *\/\r\n    }\r\n  }\r\n\r\n  @media (min-width: 768px) {\r\n    .cta-bg a.btn {\r\n      margin-left: -200px;\r\n    }\r\n  }\r\n<\/style>\r\n\t\t\t<\/div>\n\t\t<\/section>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Understand CCPA compliance and CPRA regulations. TrustArc\u2019s tools help your business meet California Consumer Privacy Act requirements with ease<\/p>\n","protected":false},"template":"","regulation":[92],"topic-regulation":[84,85],"class_list":["post-1806","regulations","type-regulations","status-publish","hentry","regulation-united-states","topic-regulation-privacy","topic-regulation-regulation"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.4 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>California Consumer Privacy Act - CCPA regulations | TrustArc<\/title>\n<meta name=\"description\" content=\"Understand CCPA compliance and CPRA regulations. TrustArc\u2019s tools help your business meet California Consumer Privacy Act requirements with ease.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/trustarc.com\/regulations\/ccpa-cpra\/\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/regulations\\\/ccpa-cpra\\\/\",\"url\":\"https:\\\/\\\/trustarc.com\\\/regulations\\\/ccpa-cpra\\\/\",\"name\":\"California Consumer Privacy Act - CCPA regulations | TrustArc\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/#website\"},\"datePublished\":\"2024-02-06T21:18:53+00:00\",\"dateModified\":\"2025-06-24T22:33:00+00:00\",\"description\":\"Understand CCPA compliance and CPRA regulations. TrustArc\u2019s tools help your business meet California Consumer Privacy Act requirements with ease.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/trustarc.com\\\/regulations\\\/ccpa-cpra\\\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/#website\",\"url\":\"https:\\\/\\\/trustarc.com\\\/\",\"name\":\"TrustArc\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/trustarc.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"California Consumer Privacy Act - CCPA regulations | TrustArc","description":"Understand CCPA compliance and CPRA regulations. TrustArc\u2019s tools help your business meet California Consumer Privacy Act requirements with ease.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/trustarc.com\/regulations\/ccpa-cpra\/","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/trustarc.com\/regulations\/ccpa-cpra\/","url":"https:\/\/trustarc.com\/regulations\/ccpa-cpra\/","name":"California Consumer Privacy Act - CCPA regulations | TrustArc","isPartOf":{"@id":"https:\/\/trustarc.com\/#website"},"datePublished":"2024-02-06T21:18:53+00:00","dateModified":"2025-06-24T22:33:00+00:00","description":"Understand CCPA compliance and CPRA regulations. TrustArc\u2019s tools help your business meet California Consumer Privacy Act requirements with ease.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/trustarc.com\/regulations\/ccpa-cpra\/"]}]},{"@type":"WebSite","@id":"https:\/\/trustarc.com\/#website","url":"https:\/\/trustarc.com\/","name":"TrustArc","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/trustarc.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/regulations\/1806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/regulations"}],"about":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/types\/regulations"}],"wp:attachment":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/media?parent=1806"}],"wp:term":[{"taxonomy":"regulation","embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/regulation?post=1806"},{"taxonomy":"topic-regulation","embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/topic-regulation?post=1806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}