Privacy guide
CCPA and CPRA disclosures
California notices use defined information categories and require facts about collection, use, disclosure, retention, sale, sharing, and consumer rights.
Use statutory categories carefully
Map real data to categories instead of claiming every possible type. Keep the lookback disclosure and current collection practices aligned.
Sale and sharing need separate analysis
Cross-context behavioral advertising may be sharing even without a monetary transaction; provider or contractor exceptions depend on facts and contracts.
Request methods must function
Verification, authorized agents, correction, deletion, disclosure, opt-out, limitation, appeal where relevant, and GPC handling need operational support.