What do the CCPA & CPRA laws contain?
The California Consumer Privacy Act (CCPA) came into force on January 1, 2020 and is the first comprehensive data protection law in the USA that applies specifically to the state of California. This law strengthens the consumer protection rights of California's citizens and sets new standards in the handling of personal data. An important extension of this law is the California Privacy Rights Act (CPRA), which came into force on July 1, 2023, with retroactive effect until January 1, 2022. The CPRA tightens the requirements for companies regarding the use of personally identifiable information (PI) and ensures that this data is handled responsibly and in compliance with the law from that date. The CPRA also established the California Privacy Protection Agency (CPPA), a new government agency that monitors and enforces compliance with data protection statewide.
Consumer rights in California
-
Right to prohibit data sharing: Consumers can ask companies not to sell or share their personal data (Do not share or sell my personal information). Express consent is also required for sensitive personal data (Limit the use of my sensitive personal information).
-
Right to correction and deletion: Citizens have the right to request the correction or deletion of their data. Companies are also obliged to ask third parties who hold this data to update or delete it.
-
Right of access: Consumers can request to see what personal data is stored and receive information on how long this data is stored (Data Subject Access Requests = DSAR)
Obligations for companies
- Opt-out rights for consumers: Provide consumers with the ability to opt-out of the use or sale of their personal data on your website or app.
- Implement required buttons: Add buttons such as “Do Not Sell or Share My Personal Information” and “Limit the Use of My Sensitive Personal Information” on your platform to comply with legal requirements.
- Comply with the right of access: Ensure that consumers have the right to request access to data collection and all related processes. It is recommended to implement procedures for Data Subject Access Requests (DSARs).
CCPA & CPRA Compliance through a Consent Management Platform (CMP)
To meet the requirements of the CCPA and CPRA, effective management of consents is necessary. This is where the Consent Management Platform (CMP) by Usercentrics comes into play. The CMP is specifically designed to assist businesses in the transparent collection and management of user data, thereby achieving CCPA/CPRA compliance. As a market leader, Usercentrics offers a comprehensive all-in-one solution that enables simultaneous compliance with CCPA, GDPR, and other key privacy laws. The CMP provides more than 2,200 legal templates to save time and resources in implementation and maintenance.
Setting up the CMP according to CCPA and CPRA guidelines and utilizing the diverse features of the Usercentrics CMP can be particularly challenging for beginners. For this reason, we offer to implement the CMP for you on your website. You determine the required features and design, and we seamlessly integrate the CMP into your technology stack. Avoid legal risks and save time and resources by having your CMP setup done by our expert team.
Choose DWC for Your CCPA Compliance and Generate Valuable Insights
We are experts in consent management and collaborate closely with leading providers Usercentrics and BigID to create optimal solutions in consent and data management for our clients. Our focus is on implementing tailored, privacy-compliant Consent Management Platform (CMP) solutions that enable the highest possible consent rates (opt-in). This enhances your data collection for more effective analysis and targeted marketing. Leverage our global expertise and partnerships with industry leaders not only to meet data protection requirements but also to gain significant competitive advantages.
