california-consumer-rights
Installation
SKILL.md
California Consumer Rights Workflow
Overview
The CCPA/CPRA grants California consumers six categories of privacy rights enforceable against businesses that meet the applicability thresholds under Cal. Civ. Code §1798.140(d). These rights are modeled after but distinct from GDPR data subject rights, with California-specific verification requirements, response timelines, and scope limitations.
The California Privacy Protection Agency (CPPA) regulations (11 CCR §7001-7102) provide detailed implementation requirements for consumer request handling, including verification standards, response formats, and authorized agent procedures.
Consumer Rights Matrix
| Right | Statute | Verification Level | Response Time | Extension | Frequency Limit |
|---|---|---|---|---|---|
| Right to Know (categories) | §1798.110 | 2 data points | 45 days | +45 days | 2 per 12 months |
| Right to Know (specific pieces) | §1798.110 | 3 data points + declaration | 45 days | +45 days | 2 per 12 months |
| Right to Delete | §1798.105 | 2 data points | 45 days | +45 days | No limit stated |
| Right to Correct | §1798.106 | 2 data points | 45 days | +45 days | No limit stated |
| Right to Opt-Out of Sale/Sharing | §1798.120 | Reasonable belief | 15 business days | None | Anytime |
| Right to Limit Sensitive PI | §1798.121 | Reasonable belief | 15 business days | None | Anytime |