Home / Certifications / California consumer privacy rights
Security and privacy

California consumer privacy rights

California privacy law giving consumers rights over personal information, including the right to know, delete, correct and opt out of sale or sharing.

CodeCCPA / CPRA
RegionCalifornia, United States
TypeMandatory in scope
Issued byCalifornia Privacy Protection Agency and the Attorney General
Last verified2026-10-10
Quick answerCertification · last verified 2026-10-10

California privacy law giving consumers rights over personal information, including the right to know, delete, correct and opt out of sale or sharing. Status: Mandatory in scope. Issued or recognised by California Privacy Protection Agency and the Attorney General.

CodeCCPA / CPRA
RegionCalifornia, United States
TypeMandatory in scope
Issued byCalifornia Privacy Protection Agency and the Attorney General
GroupSecurity and privacy
Last verified2026-10-10
How to cite this pageIoT Atlas. "California consumer privacy rights". https://hi-spark.net/certification/ccpa-cpra.html Last verified 2026-10-10.

What it means

Businesses meeting the thresholds must provide notices at collection, honour consumer requests and manage contracts with service providers. Device identifiers and precise location data count as personal information, so companion apps and cloud services are usually in scope.

Applies to

  • Businesses serving California residents
  • Companion apps and cloud services
  • Ad tech and analytics integrations

What it does not cover

  • EU data protection rules
  • Sector rules such as health data laws
  • Device level security requirements

Verification checklist

  • Confirm whether the business thresholds apply
  • Update the privacy notice and collection disclosures
  • Implement request handling and identity verification
  • Review contracts with analytics and advertising partners

Related certifications