OtherUnited States - California
CCPA/CPRA
What is CCPA/CPRA?
California Consumer Privacy Act / California Privacy Rights Act. It comprises 31 controls organised across 11 domains, and applies in the United States - California.
How CCPA/CPRA maps to other frameworks
All 31 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 11 domains CCPA/CPRA groups its controls into
Enforcement
Privacy Operations
Sensitive PI
Consumer Rights
Service Provider
Where CCPA/CPRA overlaps with the standards you already hold
Step-by-step implementation of CCPA/CPRA
More CCPA/CPRA comparisons
Analysis of CCPA/CPRA
How to Execute CCPA-CPRA Consumer Rights Management Integration with PCI DSS v4.0 Data Protection Requirements for E-commerce Privacy OperationsE-commerce organizations face complex compliance requirements when processing both personal information under CCPA-CPRA and payment card data under PCI DSS v4.0. This integration strategy aligns consumer privacy rights management with payment security controls to create unified data protection processes that satisfy both regulatory frameworks while reducing operational complexity.
How to Execute CCPA-CPRA Consumer Rights Request Automation with PCI DSS v4.0 Data Security Standards for Retail Payment Processing EnvironmentsCCPA-CPRA consumer rights requests in retail environments processing payment data require integration with PCI DSS v4.0 security controls to ensure data protection while fulfilling privacy obligations. This integration approach balances consumer privacy rights with payment security requirements through automated request processing and secure data handling procedures.
How to Execute CCPA-CPRA Consumer Rights Response Integration with SOC 2 Type II Data Access Controls for SaaS Platform Privacy OperationsCCPA-CPRA consumer rights management requires integration with SOC 2 access controls to ensure privacy requests don't compromise security controls in SaaS environments. This integration enables organizations to fulfill consumer rights obligations while maintaining strong data protection and audit trail requirements.
How to Implement CCPA-CPRA Privacy Rights Automation with ISO 27001:2022 Information Security Controls for Enterprise Data Subject Request ManagementThe California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) requires sophisticated automation capabilities for data subject rights management that must integrate with ISO 27001:2022 information security controls. This integration ensures privacy rights fulfillment while maintaining enterprise security posture and audit trail requirements for large-scale data processing operations.
What CCPA/CPRA means in your sector
What CCPA/CPRA means for your job
Questions people ask about CCPA/CPRA
What is CCPA/CPRA?
California Consumer Privacy Act / California Privacy Rights Act.
How many controls does CCPA/CPRA have?
CCPA/CPRA contains 31 controls organized across 11 domains.
Where does CCPA/CPRA apply?
CCPA/CPRA is applicable in United States - California. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does CCPA/CPRA map to?
CCPA/CPRA has control-to-control mappings with 6 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with CCPA/CPRA compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query CCPA/CPRA programmatically
CCPA/CPRA, its 31 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
CCPA/CPRA API reference and MCP config →What CCPA/CPRA requires, control by control
How much of another standard CCPA/CPRA already covers
Each crosswalk is judged control by control, and the mappings that were rejected are kept alongside the ones that held.
How ready are you for CCPA/CPRA?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .