United States
CCPA compliance, made simple
The California Consumer Privacy Act (and its expansion, the CPRA) gives California residents specific rights over their personal data and imposes obligations on qualifying businesses that collect it.
ComplianceDesk gives you 15 pre-built CCPA controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving CCPA compliance stops being a spreadsheet exercise.
Every CCPA control, organised for you
The real control library ComplianceDesk seeds the moment you activate CCPA — 15 controls across 7 categories.
Consumer Right to Know/Access
- CCPA-1.1 Verifiable consumer requests to know are processed
- CCPA-1.2 At least two designated request methods provided
Consumer Right to Delete
- CCPA-2.1 Verified deletion requests are honoured
- CCPA-2.2 Deletion exceptions applied and documented
Right to Opt-Out of Sale/Sharing
- CCPA-3.1 "Do Not Sell or Share My Personal Information" link maintained
- CCPA-3.2 Opt-out preference signals (e.g. Global Privacy Control) honoured
- CCPA-3.3 Opt-out instructions propagated to third parties
Notice at Collection & Privacy Policy
- CCPA-4.1 Notice at collection provided at or before data collection
- CCPA-4.2 Online privacy policy updated at least annually
Data Minimization & Retention
- CCPA-5.1 Collection limited to disclosed, necessary purposes
- CCPA-5.2 Retention schedules defined and enforced
Service Provider/Third-Party Contracts
- CCPA-6.1 Service provider contracts include required CCPA terms
- CCPA-6.2 Third-party data sale/sharing agreements reviewed
Non-Discrimination
- CCPA-7.1 No denial of service or differential pricing for exercising rights
- CCPA-7.2 Financial incentive programs disclosed and voluntary
Frequently asked questions
How many controls does ComplianceDesk track for CCPA?
15, organised into 7 categories, ready to assign to an owner as soon as you activate the framework.
Can I track CCPA alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up CCPA in ComplianceDesk?
Activating CCPA instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
Other United States frameworks
See your full compliance picture
131 frameworks, one system of record.