US-CCPA

US CCPA compliance regulation modern detailed.

Définition

US CCPA (California Consumer Privacy Act, signed septembre 2018, effective 1 janvier 2020) + CPRA (California Privacy Rights Act amendments via Proposition 24, approved novembre 2020, effective 1 janvier 2023) sont les premieres comprehensive consumer privacy laws US precedent multiple state privacy laws (Virginia + Colorado + Connecticut + Utah + Iowa + Indiana + Tennessee + Montana + Texas + Oregon + Delaware + multiple ~20 states 2024) ; CCPA + CPRA donnent California residents droits notice + know + delete + opt-out of sale/sharing + correct + limit + non-discrimination ; California Privacy Protection Agency CPPA est l'enforcer dedicated CPRA created. Detail technique + scope d'application + obligations conformite + sanctions non-conformite + processus reporting + impact entreprises in-scope + alignement avec regulations adjacentes nationales + internationales + governance + supervisory authorities + timeline implementation + transitions + jurisprudence + best practices documentation industry adoption.

Origine

CCPA signed septembre 2018 effective janvier 2020 ; CPRA amendments November 2020 effective janvier 2023 ; CPPA dedicated enforcer ; ~20 US state privacy laws 2024.

Exemple en contexte

California resident submits CCPA/CPRA Right to Know request to retail company : (1) Company verifies identity (e.g., via account login + secondary identifier), (2) Company provides comprehensive disclosure of categories of personal information collected + sources + purposes + categories of third parties shared with + specific pieces if requested + retention periods, (3) Company responds within 45 days (extendable +45 days), (4) Free of charge first request annually, (5) Provides parallel Right to Delete + Opt-out of Sale + Correct + multiple CCPA/CPRA rights similar process.

Termes liés

• Brazil LGPD — comparable national privacy law.