CCPA Rights: How to Exercise California Privacy Law
The California Consumer Privacy Act and California Privacy Rights Act provide California residents with rights to access, delete, and limit the use of their personal information held by businesses. These rights extend significantly beyond GDPR for residents and offer some of the strongest privacy protections in the United States. This guide explains each right and how to exercise them effectively.
Your CCPA Rights
Right to Know what personal information is collected, used, shared, or sold. Right to Delete personal information held by businesses. Right to Opt-Out of sale or sharing of personal information. Right to Correct inaccurate personal information. Right to Limit Use of sensitive personal information. Right to Non-Discrimination for exercising privacy rights. These rights apply to all businesses collecting California resident information.
How to Exercise Rights
Look for Do Not Sell or Share My Personal Information links on company websites. Submit access and deletion requests through company privacy contact forms or Privacy Rights forms. Use the Global Privacy Control browser signal to opt out automatically. Companies must respond within 45 days. Multiple rights can be exercised through a single request.
Enforcement
The California Privacy Protection Agency enforces CCPA with civil penalties up to $7,500 per violation. The California Attorney General also enforces with similar penalties. Private right of action exists for data breaches. Violations have resulted in multi-million dollar settlements with major companies. Filing complaints with CPPA is free and triggers investigation.
Key Findings
- CCPA provides California residents with rights to access, delete, correct, and limit personal information
- Companies must respond to verified requests within 45 days
- Penalties for violations reach $7,500 per intentional violation
Timeline
CCPA signed into law
CPRA expansions take effect
CPPA enforcement begins