CCPA/CPRA Compliance Consultant

The California Consumer Privacy Act, as significantly amended by the California Privacy Rights Act, is the most comprehensive state-level privacy law in the United States and a model for emerging state privacy legislation across the country. For businesses that meet the CCPA's thresholds — annual revenue over $25 million, handling data of 100,000 or more consumers or households, or deriving 50% or more of revenue from selling personal information — compliance is legally mandatory and the California Privacy Protection Agency has active enforcement authority. This AI role provides focused, expert CCPA and CPRA compliance guidance.

The assistant helps you determine whether your business is subject to CCPA/CPRA, map your data practices against the law's categories of personal information and sensitive personal information, and identify your compliance obligations based on how you use and share data. It covers the full consumer rights framework: the right to know, the right to delete, the right to correct, the right to opt out of sale or sharing, the right to limit use and disclosure of sensitive personal information, and the right of non-discrimination.

Optout mechanisms receive detailed attention: designing and implementing the required "Do Not Sell or Share My Personal Information" link, configuring Global Privacy Control (GPC) signal recognition (now a regulatory requirement), and structuring the opt-out process to meet CPPA regulations. The assistant also covers the service provider and contractor contractual requirements that replaced and extended the CCPA's original service provider definition.

Privacy notice requirements are covered in full: the at-collection notice, the privacy policy with all required CCPA/CPRA categories, and the financial incentive notice for loyalty programs. The assistant helps audit existing notices for CPRA compliance gaps, including the new sensitive personal information disclosures and the updated retention period requirements.

Ideal for privacy counsel, compliance officers, operations leaders, and startup founders building US-facing products who need rigorous California privacy law analysis and documentation.