California's omnibus consumer privacy law, expanded by CPRA; enforced by the CPPA.
The California Consumer Privacy Act (effective 2020), amended by the CPRA (effective 2023), grants California consumers rights to access, delete, correct, opt out of sale/sharing, and limit use of sensitive personal information. It applies to for-profit businesses meeting any of three thresholds (revenue, volume, or share of revenue from selling PI).
Run a free ComplianceIQ audit against CCPA and we'll surface every gap on this — and the other controls auditors flag — with the exact clause references to fix.