CCPA
What is CCPA?
The California Consumer Privacy Act gives California residents rights over their personal information including the right to know, delete, and opt out of sale.
Terms that appear alongside ccpa
Each of these is named in at least one of the same controls as ccpa. The number is how many controls name both.
- gdpr 27 shared controls
- compliance 24 shared controls
- state privacy laws 21 shared controls
- consent 19 shared controls
- audit 16 shared controls
- data subject 15 shared controls
- hipaa 14 shared controls
- nist 13 shared controls
Frameworks that govern ccpa
What the standards actually require on ccpa
Requirements naming ccpa across 6 standards, quoted from the control text.
Security Dimension 8 Privacy per X.805 Clause 6.8: Privacy shields what could be inferred by watching activity on the network, for example websites visited by users + their geographic location + the IP addresses and DNS names assigned to devices inside a provi...
X805-Dim8-Privacy-Identification-Network-Activity-Personal-Information-Confidentiality · ITU-T X.805 Security Dimension 8 - Privacy + Identification of Network Activity + Personal Information Confidentiality + Subscriber Anonymity + Pseudonymity + Anti-Tracking + Location Privacy + Data Minimization + GDPR/CCPA Alignment →Section 4(3) of Kentucky CDPA establishes the Universal Opt-Out Mechanism (UOOM) requirement + reflects converging US state privacy law standards for browser-level opt-out signals.
KY-CDPA-Universal-Opt-Out-Mechanism-Recognized-Browser-Level-GPC-Global-Privacy-Control · Kentucky CDPA Universal Opt-Out Mechanism + Section 3 + Section 4 + Recognized + Browser-Level + GPC Global Privacy Control + UOOM + Honored for Targeted Advertising + Sale + Profiling + Annual List of Recognized Mechanisms →Per Iowa Code 715D.7 ICDPA imposes contractual requirements on the relationship between controller and processor. (1) Processor Obligations: a processor shall adhere to the instructions of a controller and shall assist the controller in meeting the controller...
ICDPA-Processor-Contracts-DPA-Subprocessor-Confidentiality-Audit-EndOfContract-Iowa-Code-715D-7 · Iowa CDPA Processor Contracts - Data Processing Agreement (DPA) + Required Provisions + Subprocessor Approval + Confidentiality + End of Contract Deletion + Audit Rights + Assistance →A business must keep records of CCPA requests and its responses for at least 24 months, securely, in a ticket or log format giving the request date, type and channel, response date, nature of the response and the reason for any denial.
ccpa-cpra::CCR 7101 · Keep records of consumer requests for 24 months →Section 4 of KOSA establishes mandatory default safeguards for known or reasonably inferred minor users. (1) Section 4(a) Mandatory Default Safeguards: All covered platforms must establish the following safeguards as DEFAULT for known minors and provide abilit...
KOSA-Default-Safeguards-Minors-Section4-Strong-Privacy-Time-Limits-Content-Filters-Restricted-Contact-Geographic-Location · KOSA Default Safeguards for Minors + Section 4 + Strong Privacy Settings + Time Management + Content Filtering + Restricted Contact + Geographic Location Default Off + Personalized Recommendations Opt-Out + Direct Messaging Restrictions + Minor Account Designation →Honor consumer privacy rights + consent + marketing + loyalty data obligations per applicable jurisdiction privacy law + sectoral marketing law.
NRFCS-4 · Consumer Privacy Rights, Consent, Marketing, and Loyalty Data →Questions people ask about ccpa
What is CCPA?
Why is CCPA important for compliance?
Which compliance frameworks address CCPA?
Where can I learn more about CCPA?
See how CCPA applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.