California
Cal. Civ. Code § 1798.100 et seq. (CCPA as amended by CPRA)
Applicability
- Consent model: opt_out
- Consumer threshold: 100,000
- Revenue threshold: $25,000,000
Enforcement
- Regulator: California Privacy Protection Agency (CPPA) / Attorney General
- DSAR response window: 45 days
- Cure period: None — no opportunity to cure
Global Privacy Control (GPC)
Mandatory to honor as of 2023-01-01.
Recommended CMP for California Compliance
Automate opt-out banners, GPC signals, and regional compliance.
Deploy California Compliant Banner →Affiliate disclosure: this is an affiliate link — we may earn a commission at no cost to you.
The information provided is for educational and comparison purposes only and does not constitute formal legal advice.
Sourced from a secondary legal tracker (not yet independently verified against primary statute text), captured 2026-09-11. Source: https://www.consenteo.com/knowledge-hub/legal/us_state_privacy_law_tracker_2026.