CCPA
The California Consumer Privacy Act (CCPA) is a data privacy regulation enacted by the state of California, granting California consumers the rights to know about, access, delete, and opt out of the sale of their personal information. The regulation applies to businesses operating in California that meet specific criteria and is one of the most representative state-level privacy laws in the United States, establishing clear compliance requirements for enterprise data collection, processing, and sharing practices.
Core Facts
The United States lacks a unified comprehensive privacy law at the federal level; California's CCPA/CPRA grants consumers the right to know, the right to delete, and the right to opt out of data sales, and Virginia, Colorado, Connecticut, and other states have passed similar legislation.
California was the first to pass the Consumer Privacy Act (CCPA) in 2018.
GDPR explicitly stipulates the legal bases for data processing and restrictions on cross-border transfers, requiring data controllers to demonstrate the legal basis for their processing activities
Timeline (last 90 days)
The core obstacles facing enterprise data licensing include privacy and compliance, difficulty in pricing data, and competitive concerns.
Regulations such as GDPR and CCPA impose strict restrictions on the secondary use of user data.
Under regulatory frameworks such as GDPR and CCPA, sending contact data back to ad platforms constitutes a data processing purpose that must be based on the user's explicit, specific authorization and cannot be included by default in "consent to receive marketing information."
California's Consumer Privacy Act (CCPA) grants employees the right to know about and request deletion of their personal data.
Data privacy regulations such as GDPR and CCPA, as well as anti-spam regulations such as CAN-SPAM, require companies to be able to demonstrate that explicit user consent was obtained at a specific point in time and to reconstruct communication records.
The United States currently lacks a federal privacy law equivalent to the GDPR, and California's CCPA provides relatively strong but limited-scope protection
California's CCPA/CPRA and the Automated Decision-Making Technology regulations, along with Illinois' BIPA, are among the most representative state-level privacy laws enacted in the United States in recent years.
GDPR and CCPA respectively require companies to obtain explicit consent or provide opt-out options when collecting data on EU residents and California residents, with non-compliance fines reaching millions of euros or 4% of revenue.
The EU AI Act, U.S. state privacy regulations such as the CCPA, and regulators in multiple countries are exploring dedicated compliance requirements for AI training data.
The EU Consumer Rights Directive and certain U.S. state laws place restrictions on material changes to digital service contracts, requiring platforms to notify users in advance and grant them the right to opt out or cancel their subscriptions.
22 more timeline events
All Facts (20)
The United States lacks a unified comprehensive privacy law at the federal level; California's CCPA/CPRA grants consumers the right to know, the right to delete, and the right to opt out of data sales, and Virginia, Colorado, Connecticut, and other states have passed similar legislation.
70%VerifiedCalifornia was the first to pass the Consumer Privacy Act (CCPA) in 2018.
70%VerifiedGDPR explicitly stipulates the legal bases for data processing and restrictions on cross-border transfers, requiring data controllers to demonstrate the legal basis for their processing activities
65%VerifiedOpen-source solutions allow enterprises to run all components in private environments, meeting compliance requirements such as SOC 2, GDPR, and HIPAA while achieving audit transparency
65%VerifiedGDPR第17条赋予用户'被遗忘权'（Right to Erasure），要求企业在用户提出请求时删除其个人数据
65%VerifiedCustomer usage behavior, payment capability, and business scale data aggregated by billing systems constitute sensitive information requiring strict control under data privacy regulatory frameworks such as GDPR and CCPA.
65%VerifiedVoice data constitutes biometric information and is subject to strict protection under regulatory frameworks such as GDPR and CCPA.
65%Unverified成熟的企业级AI工具通常需要提供SOC 2 Type II认证、数据处理协议（DPA）以及私有化部署选项
85%UnverifiedThe concept of data sovereignty is affirmed in regulations such as GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act)
60%UnverifiedGDPR, China's Data Security Law and Personal Information Protection Law, and the U.S. HIPAA regulations impose strict restrictions on data storage, transmission, and processing, with non-compliance fines potentially reaching tens of millions to hundreds of millions of euros.
60%UnverifiedApple's account deletion policy originates from data privacy regulations such as the "right to be forgotten" under the EU's GDPR and the California CCPA.
60%UnverifiedCCPA于2020年生效，赋予加州居民知晓、删除和拒绝出售个人数据的权利
60%UnverifiedRegulations such as GDPR and CCPA impose strict restrictions on the secondary use of user data.
50%UnverifiedThe core obstacles facing enterprise data licensing include privacy and compliance, difficulty in pricing data, and competitive concerns.
50%UnverifiedUnder regulatory frameworks such as GDPR and CCPA, sending contact data back to ad platforms constitutes a data processing purpose that must be based on the user's explicit, specific authorization and cannot be included by default in "consent to receive marketing information."
50%UnverifiedCalifornia's Consumer Privacy Act (CCPA) grants employees the right to know about and request deletion of their personal data.
50%UnverifiedData privacy regulations such as GDPR and CCPA, as well as anti-spam regulations such as CAN-SPAM, require companies to be able to demonstrate that explicit user consent was obtained at a specific point in time and to reconstruct communication records.
50%UnverifiedThe United States currently lacks a federal privacy law equivalent to the GDPR, and California's CCPA provides relatively strong but limited-scope protection
50%UnverifiedCalifornia's CCPA/CPRA and the Automated Decision-Making Technology regulations, along with Illinois' BIPA, are among the most representative state-level privacy laws enacted in the United States in recent years.
50%UnverifiedGDPR and CCPA respectively require companies to obtain explicit consent or provide opt-out options when collecting data on EU residents and California residents, with non-compliance fines reaching millions of euros or 4% of revenue.
50%