Managing CCPA Consumer Requests

Overview

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants California consumers specific rights regarding their personal information. This skill provides the operational workflow for handling CCPA consumer requests, including the right to know, right to delete, right to correct, right to opt-out of sale/sharing, and the right to limit use of sensitive personal information.

Legal Foundation

CCPA / CPRA Core Provisions

Right to Know (Cal. Civ. Code Section 1798.100, 1798.110, 1798.115)

Consumers have the right to request that a business disclose:

• The categories of personal information collected (Section 1798.110(a)(1))
• The categories of sources from which personal information is collected (Section 1798.110(a)(2))
• The business or commercial purpose for collecting, selling, or sharing personal information (Section 1798.110(a)(3))
• The categories of third parties to whom personal information is disclosed (Section 1798.110(a)(4))
• The specific pieces of personal information the business has collected about the consumer (Section 1798.110(a)(5))