Act 2018
California Consumer Privacy Act of 2018 (as amended by the CPRA)
Plain-English summary
California privacy law giving consumers rights to know, delete, correct, opt out of sale or sharing and limit use of sensitive personal information. It applies to for-profit businesses meeting a revenue or data-volume threshold and is enforced by the Attorney General and the California Privacy Protection Agency. The US has no single comprehensive federal data protection law.
Who it applies to
All industries
Topics
Data Protection & Privacy
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Consumer rights to know, delete, correct and opt out of sale or sharing (California) | Ongoing | — | source | |
Covered businesses must honour California consumers' rights to know, delete, correct, opt out of sale or sharing (including through a global privacy control) and limit use of sensitive personal information, without discriminating against those who exercise them. Thresholds: revenue over US$25 million, data of 100,000 or more residents or households, or 50 per cent of revenue from selling personal information. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.