CCPA / CPRA

Overview

CCPA / CPRA (CCPA/CPRA) — California consumer privacy rights and business obligations. ComplAI maps this framework’s controls so your team can track implementation, evidence, and audit readiness.

10 controls available in ComplAI for this framework.

Who it's for

• Organizations that must demonstrate CCPA/CPRA compliance
• Security and compliance teams operating in California, US
• Customers and partners that require CCPA/CPRA assurance

Why it matters

CCPA/CPRA is a recognized privacy framework. Activating it in ComplAI lets you manage controls, evidence, and readiness in one place.

How ComplAI helps

• Activate CCPA/CPRA in the Framework Library to load its control catalog
• Assign owners, track compliance status, and attach evidence per control
• Use risk register and issues workflows when controls fail or deviate
• Export readiness views for leadership and auditors

Sample controls

• §1798.100

  Notice at collection

  data protection

• §1798.110

  Right to know

  data protection

• §1798.105

  Right to delete

  data protection

• §1798.120

  Right to opt-out of sale/share

  data protection

• §1798.106

  Right to correct

  data protection

• §1798.121

  Right to limit sensitive PI

  data protection

Getting started

1. Open Framework Library and activate CCPA/CPRA
2. Review the control list and prioritize high-impact domains
3. Attach policies, procedures, and technical evidence
4. Mark controls audit-ready and monitor residual gaps