CCPA v2026
California Consumer Privacy Act - California state privacy regulation
This is a reference tool, not an authoritative source. For official documentation, visit oag.ca.gov.
825 All
Article 1 — General provisions (4 requirements)
Article 10 — Service providers, contractors, and third parties (22 requirements)
7100Training.
7100(a)7100(a)
7100(b)7100(b)
7101Record-Keeping.
7101(a)7101(a)
7101(b)7101(b)
7101(c)7101(c)
7101(d)7101(d)
7101(e)7101(e)
7102Requirements for Businesses Collecting Large Amounts of Personal Information.
7102(a)7102(a)
7102(a)(1)7102(a)(1)
7102(a)(1)(A)7102(a)(1)(A)
7102(a)(1)(B)7102(a)(1)(B)
7102(a)(1)(C)7102(a)(1)(C)
7102(a)(1)(D)7102(a)(1)(D)
7102(a)(1)(E)7102(a)(1)(E)
7102(a)(1)(F)7102(a)(1)(F)
7102(a)(1)(G)7102(a)(1)(G)
7102(a)(1)(H)7102(a)(1)(H)
7102(a)(2)7102(a)(2)
7102(b)7102(b)
Article 11 — Financial incentives and differential pricing (98 requirements)
7120Requirement to Complete a Cybersecurity Audit.
7120(a)7120(a)
7120(b)7120(b)
7120(b)(1)7120(b)(1)
7120(b)(2)7120(b)(2)
7120(b)(2)(A)7120(b)(2)(A)
7120(b)(2)(B)7120(b)(2)(B)
7121Timing Requirements for Cybersecurity Audits and Audit Reports.
7121(a)7121(a)
7121(a)(1)7121(a)(1)
7121(a)(2)7121(a)(2)
7121(a)(3)7121(a)(3)
7121(b)7121(b)
7122Thoroughness and Independence of Cybersecurity Audits.
7122(a)7122(a)
7122(a)(1)7122(a)(1)
7122(a)(2)7122(a)(2)
7122(a)(3)7122(a)(3)
7122(b)7122(b)
7122(c)7122(c)
7122(d)7122(d)
7122(e)7122(e)
7122(f)7122(f)
7122(g)7122(g)
7123Scope of Cybersecurity Audit and Audit Report.
7123(a)7123(a)
7123(b)7123(b)
7123(b)(1)7123(b)(1)
7123(b)(2)7123(b)(2)
7123(b)(3)7123(b)(3)
7123(c)7123(c)
7123(c)(1)7123(c)(1)
7123(c)(1)(A)7123(c)(1)(A)
7123(c)(1)(B)7123(c)(1)(B)
7123(c)(2)7123(c)(2)
7123(c)(3)7123(c)(3)
7123(c)(3)(A)7123(c)(3)(A)
7123(c)(3)(A)(i)7123(c)(3)(A)(i)
7123(c)(3)(A)(ii)7123(c)(3)(A)(ii)
7123(c)(3)(A)(iii)7123(c)(3)(A)(iii)
7123(c)(3)(B)7123(c)(3)(B)
7123(c)(3)(C)7123(c)(3)(C)
7123(c)(3)(D)7123(c)(3)(D)
7123(c)(4)7123(c)(4)
7123(c)(4)(A)7123(c)(4)(A)
7123(c)(4)(B)7123(c)(4)(B)
7123(c)(4)(C)7123(c)(4)(C)
7123(c)(5)7123(c)(5)
7123(c)(5)(A)7123(c)(5)(A)
7123(c)(5)(B)7123(c)(5)(B)
7123(c)(5)(C)7123(c)(5)(C)
7123(c)(5)(D)7123(c)(5)(D)
7123(c)(5)(E)7123(c)(5)(E)
7123(c)(6)7123(c)(6)
7123(c)(7)7123(c)(7)
7123(c)(8)7123(c)(8)
7123(c)(8)(A)7123(c)(8)(A)
7123(c)(8)(B)7123(c)(8)(B)
7123(c)(9)7123(c)(9)
7123(c)(10)7123(c)(10)
7123(c)(11)7123(c)(11)
7123(c)(12)7123(c)(12)
7123(c)(13)7123(c)(13)
7123(c)(14)7123(c)(14)
7123(c)(15)7123(c)(15)
7123(c)(16)7123(c)(16)
7123(c)(17)7123(c)(17)
7123(c)(17)(A)7123(c)(17)(A)
7123(c)(17)(B)7123(c)(17)(B)
7123(c)(17)(B)(i)7123(c)(17)(B)(i)
7123(c)(17)(B)(ii)7123(c)(17)(B)(ii)
7123(c)(18)7123(c)(18)
7123(d)7123(d)
7123(e)7123(e)
7123(e)(1)7123(e)(1)
7123(e)(2)7123(e)(2)
7123(e)(3)7123(e)(3)
7123(e)(4)7123(e)(4)
7123(e)(5)7123(e)(5)
7123(e)(6)7123(e)(6)
7123(e)(7)7123(e)(7)
7123(e)(8)7123(e)(8)
7123(e)(9)7123(e)(9)
7123(e)(10)7123(e)(10)
7123(f)7123(f)
7124Certification of Completion.
7124(a)7124(a)
7124(b)7124(b)
7124(c)7124(c)
7124(c)(1)7124(c)(1)
7124(c)(2)7124(c)(2)
7124(c)(3)7124(c)(3)
7124(d)7124(d)
7124(d)(1)7124(d)(1)
7124(d)(2)7124(d)(2)
7124(d)(3)7124(d)(3)
7124(d)(4)7124(d)(4)
7124(d)(5)7124(d)(5)
Article 12 — Cybersecurity audits and risk assessments (207 requirements)
7150When a Business Must Conduct a Risk Assessment.
7150(a)7150(a)
7150(b)7150(b)
7150(b)(1)7150(b)(1)
7150(b)(2)7150(b)(2)
7150(b)(2)(A)7150(b)(2)(A)
7150(b)(3)7150(b)(3)
7150(b)(4)7150(b)(4)
7150(b)(5)7150(b)(5)
7150(b)(6)7150(b)(6)
7150(c)7150(c)
7150(c)(1)7150(c)(1)
7150(c)(2)7150(c)(2)
7150(c)(3)7150(c)(3)
7150(c)(4)7150(c)(4)
7151Stakeholder Involvement for Risk Assessments.
7151(a)7151(a)
7151(b)7151(b)
7152Risk Assessment Requirements.
7152(a)7152(a)
7152(a)(1)7152(a)(1)
7152(a)(2)7152(a)(2)
7152(a)(3)7152(a)(3)
7152(a)(3)(A)7152(a)(3)(A)
7152(a)(3)(B)7152(a)(3)(B)
7152(a)(3)(C)7152(a)(3)(C)
7152(a)(3)(D)7152(a)(3)(D)
7152(a)(3)(E)7152(a)(3)(E)
7152(a)(3)(F)7152(a)(3)(F)
7152(a)(3)(G)7152(a)(3)(G)
7152(a)(3)(G)(i)7152(a)(3)(G)(i)
7152(a)(3)(G)(ii)7152(a)(3)(G)(ii)
7152(a)(4)7152(a)(4)
7152(a)(5)7152(a)(5)
7152(a)(5)(A)7152(a)(5)(A)
7152(a)(5)(B)7152(a)(5)(B)
7152(a)(5)(C)7152(a)(5)(C)
7152(a)(5)(D)7152(a)(5)(D)
7152(a)(5)(E)7152(a)(5)(E)
7152(a)(5)(F)7152(a)(5)(F)
7152(a)(5)(G)7152(a)(5)(G)
7152(a)(5)(H)7152(a)(5)(H)
7152(a)(6)7152(a)(6)
7152(a)(6)(A)7152(a)(6)(A)
7152(a)(6)(A)(i)7152(a)(6)(A)(i)
7152(a)(6)(A)(ii)7152(a)(6)(A)(ii)
7152(a)(6)(A)(iii)7152(a)(6)(A)(iii)
7152(a)(6)(A)(iv)7152(a)(6)(A)(iv)
7152(a)(7)7152(a)(7)
7152(a)(8)7152(a)(8)
7152(a)(9)7152(a)(9)
7153Additional Requirements for Businesses that Process Personal Information to Train Automated Decisionmaking Technology.
7153(a)7153(a)
7153(b)7153(b)
7154Goal of a Risk Assessment.
7154(a)7154(a)
7155Timing and Retention Requirements for Risk Assessments.
7155(a)7155(a)
7155(a)(1)7155(a)(1)
7155(a)(2)7155(a)(2)
7155(a)(3)7155(a)(3)
7155(b)7155(b)
7155(c)7155(c)
7156Conducting Risk Assessments for a Comparable Set of Processing Activities or inCompliance with Other Laws or Regulations.
7156(a)7156(a)
7156(a)(1)7156(a)(1)
7156(b)7156(b)
7156(b)(1)7156(b)(1)
7157Submission of Risk Assessments to the Agency.
7157(a)7157(a)
7157(a)(1)7157(a)(1)
7157(a)(2)7157(a)(2)
7157(b)7157(b)
7157(b)(1)7157(b)(1)
7157(b)(2)7157(b)(2)
7157(b)(3)7157(b)(3)
7157(b)(4)7157(b)(4)
7157(b)(5)7157(b)(5)
7157(b)(6)7157(b)(6)
7157(c)7157(c)
7157(c)(1)7157(c)(1)
7157(c)(2)7157(c)(2)
7157(c)(3)7157(c)(3)
7157(d)7157(d)
7157(e)7157(e)
7200When a Business’s Use of Automated Decisionmaking Technology is Subject to the Requirements of This Article.
7200(a)7200(a)
7200(b)7200(b)
7220Pre-use Notice Requirements.
7220(a)7220(a)
7220(b)7220(b)
7220(b)(1)7220(b)(1)
7220(b)(2)7220(b)(2)
7220(b)(3)7220(b)(3)
7220(c)7220(c)
7220(c)(1)7220(c)(1)
7220(c)(2)7220(c)(2)
7220(c)(2)(A)7220(c)(2)(A)
7220(c)(2)(B)7220(c)(2)(B)
7220(c)(3)7220(c)(3)
7220(c)(4)7220(c)(4)
7220(c)(5)7220(c)(5)
7220(c)(5)(A)7220(c)(5)(A)
7220(c)(5)(B)7220(c)(5)(B)
7220(c)(5)(C)7220(c)(5)(C)
7220(d)7220(d)
7220(d)(1)7220(d)(1)
7220(d)(2)7220(d)(2)
7220(d)(2)(A)7220(d)(2)(A)
7220(d)(2)(B)7220(d)(2)(B)
7220(d)(2)(C)7220(d)(2)(C)
7220(e)7220(e)
7220(e)(1)7220(e)(1)
7220(e)(2)7220(e)(2)
7220(e)(3)7220(e)(3)
7220(e)(4)7220(e)(4)
7221Requests to Opt-Out of ADMT.
7221(a)7221(a)
7221(b)7221(b)
7221(b)(1)7221(b)(1)
7221(b)(1)(A)7221(b)(1)(A)
7221(b)(1)(B)7221(b)(1)(B)
7221(b)(2)7221(b)(2)
7221(b)(2)(A)7221(b)(2)(A)
7221(b)(2)(B)7221(b)(2)(B)
7221(b)(3)7221(b)(3)
7221(b)(3)(A)7221(b)(3)(A)
7221(b)(3)(B)7221(b)(3)(B)
7221(c)7221(c)
7221(c)(1)7221(c)(1)
7221(c)(2)7221(c)(2)
7221(c)(3)7221(c)(3)
7221(c)(4)7221(c)(4)
7221(d)7221(d)
7221(e)7221(e)
7221(f)7221(f)
7221(g)7221(g)
7221(h)7221(h)
7221(i)7221(i)
7221(j)7221(j)
7221(k)7221(k)
7221(l)7221(l)
7221(m)7221(m)
7221(n)7221(n)
7221(n)(1)7221(n)(1)
7221(n)(2)7221(n)(2)
7222Requests to Access ADMT.
7222(a)7222(a)
7222(b)7222(b)
7222(b)(1)7222(b)(1)
7222(b)(2)7222(b)(2)
7222(b)(3)7222(b)(3)
7222(b)(3)(A)7222(b)(3)(A)
7222(b)(4)7222(b)(4)
7222(b)(4)(A)7222(b)(4)(A)
7222(c)7222(c)
7222(c)(1)7222(c)(1)
7222(c)(2)7222(c)(2)
7222(c)(2)(A)7222(c)(2)(A)
7222(c)(2)(B)7222(c)(2)(B)
7222(c)(2)(C)7222(c)(2)(C)
7222(d)7222(d)
7222(e)7222(e)
7222(f)7222(f)
7222(g)7222(g)
7222(h)7222(h)
7222(i)7222(i)
7222(j)7222(j)
7222(k)7222(k)
7222(l)7222(l)
7270Definition of Insurance Company.
7270(a)7270(a)
7271General Application of the CCPA to Insurance Companies.
7271(a)7271(a)
7271(b)7271(b)
7271(b)(1)7271(b)(1)
7271(b)(2)7271(b)(2)
7271(b)(3)7271(b)(3)
7300Sworn Complaints Filed with the Agency.
7300(a)7300(a)
7300(a)(1)7300(a)(1)
7300(a)(2)7300(a)(2)
7300(a)(3)7300(a)(3)
7300(a)(4)7300(a)(4)
7300(a)(5)7300(a)(5)
7300(b)7300(b)
7301Investigations.
7301(a)7301(a)
7301(b)7301(b)
7302Probable Cause Proceedings.
7302(a)7302(a)
7302(b)7302(b)
7302(c)7302(c)
7302(c)(1)7302(c)(1)
7302(c)(2)7302(c)(2)
7302(c)(3)7302(c)(3)
7302(d)7302(d)
7303Stipulated Orders.
7303(a)7303(a)
7303(b)7303(b)
7303(c)7303(c)
7304Agency Audits.
7304(a)7304(a)
7304(b)7304(b)
7304(c)7304(c)
7304(d)7304(d)
7304(e)7304(e)
Article 2 — Disclosure and communication requirements (188 requirements)
7002Restrictions on the Collection and Use of Personal Information
7002(a)7002(a)
7002(a)(1)7002(a)(1)
7002(a)(2)7002(a)(2)
7002(b)7002(b)
7002(b)(1)7002(b)(1)
7002(b)(2)7002(b)(2)
7002(b)(3)7002(b)(3)
7002(b)(4)7002(b)(4)
7002(b)(5)7002(b)(5)
7002(c)7002(c)
7002(c)(1)7002(c)(1)
7002(c)(2)7002(c)(2)
7002(c)(3)7002(c)(3)
7002(d)7002(d)
7002(d)(1)7002(d)(1)
7002(d)(2)7002(d)(2)
7002(d)(3)7002(d)(3)
7002(e)7002(e)
7002(f)7002(f)
7003Requirements for Disclosures and Communications to Consumers.
7003(a)7003(a)
7003(b)7003(b)
7003(b)(1)7003(b)(1)
7003(b)(2)7003(b)(2)
7003(b)(3)7003(b)(3)
7003(c)7003(c)
7003(d)7003(d)
7004Requirements for Methods for Submitting CCPA Requests and Obtaining Consumer Consent.
7004(a)7004(a)
7004(a)(1)7004(a)(1)
7004(a)(2)7004(a)(2)
7004(a)(2)(A)7004(a)(2)(A)
7004(a)(2)(B)7004(a)(2)(B)
7004(a)(2)(C)7004(a)(2)(C)
7004(a)(2)(D)7004(a)(2)(D)
7004(a)(2)(E)7004(a)(2)(E)
7004(a)(3)7004(a)(3)
7004(a)(3)(A)7004(a)(3)(A)
7004(a)(3)(B)7004(a)(3)(B)
7004(a)(3)(C)7004(a)(3)(C)
7004(a)(3)(D)7004(a)(3)(D)
7004(a)(3)(E)7004(a)(3)(E)
7004(a)(4)7004(a)(4)
7004(a)(4)(A)7004(a)(4)(A)
7004(a)(4)(B)7004(a)(4)(B)
7004(a)(4)(C)7004(a)(4)(C)
7004(a)(5)7004(a)(5)
7004(a)(5)(A)7004(a)(5)(A)
7004(a)(5)(B)7004(a)(5)(B)
7004(a)(5)(C)7004(a)(5)(C)
7004(a)(5)(D)7004(a)(5)(D)
7004(b)7004(b)
7004(c)7004(c)
7010Overview of Required Disclosures.
7010(a)7010(a)
7010(b)7010(b)
7010(c)7010(c)
7010(d)7010(d)
7010(e)7010(e)
7010(f)7010(f)
7010(g)7010(g)
7011Privacy Policy.
7011(a)7011(a)
7011(b)7011(b)
7011(c)7011(c)
7011(d)7011(d)
7011(e)7011(e)
7011(e)(1)7011(e)(1)
7011(e)(1)(A)7011(e)(1)(A)
7011(e)(1)(B)7011(e)(1)(B)
7011(e)(1)(C)7011(e)(1)(C)
7011(e)(1)(D)7011(e)(1)(D)
7011(e)(1)(E)7011(e)(1)(E)
7011(e)(1)(F)7011(e)(1)(F)
7011(e)(1)(G)7011(e)(1)(G)
7011(e)(1)(H)7011(e)(1)(H)
7011(e)(1)(I)7011(e)(1)(I)
7011(e)(1)(J)7011(e)(1)(J)
7011(e)(2)7011(e)(2)
7011(e)(2)(A)7011(e)(2)(A)
7011(e)(2)(B)7011(e)(2)(B)
7011(e)(2)(C)7011(e)(2)(C)
7011(e)(2)(D)7011(e)(2)(D)
7011(e)(2)(E)7011(e)(2)(E)
7011(e)(2)(F)7011(e)(2)(F)
7011(e)(2)(G)7011(e)(2)(G)
7011(e)(2)(H)7011(e)(2)(H)
7011(e)(3)7011(e)(3)
7011(e)(3)(A)7011(e)(3)(A)
7011(e)(3)(B)7011(e)(3)(B)
7011(e)(3)(C)7011(e)(3)(C)
7011(e)(3)(D)7011(e)(3)(D)
7011(e)(3)(E)7011(e)(3)(E)
7011(e)(3)(F)7011(e)(3)(F)
7011(e)(3)(G)7011(e)(3)(G)
7011(e)(3)(H)7011(e)(3)(H)
7011(e)(3)(I)7011(e)(3)(I)
7011(e)(3)(J)7011(e)(3)(J)
7011(e)(4)7011(e)(4)
7011(e)(5)7011(e)(5)
7012Notice at Collection of Personal Information.
7012(a)7012(a)
7012(b)7012(b)
7012(c)7012(c)
7012(c)(1)7012(c)(1)
7012(c)(2)7012(c)(2)
7012(c)(3)7012(c)(3)
7012(c)(4)7012(c)(4)
7012(d)7012(d)
7012(e)7012(e)
7012(e)(1)7012(e)(1)
7012(e)(2)7012(e)(2)
7012(e)(3)7012(e)(3)
7012(e)(4)7012(e)(4)
7012(e)(5)7012(e)(5)
7012(e)(6)7012(e)(6)
7012(f)7012(f)
7012(g)7012(g)
7012(g)(1)7012(g)(1)
7012(g)(2)7012(g)(2)
7012(g)(3)7012(g)(3)
7012(g)(3)(A)7012(g)(3)(A)
7012(g)(3)(B)7012(g)(3)(B)
7012(g)(3)(C)7012(g)(3)(C)
7012(h)7012(h)
7012(i)7012(i)
7013Notice of Right to Opt-out of Sale/Sharing and the “Do Not Sell or Share My Personal Information” Link.
7013(a)7013(a)
7013(b)7013(b)
7013(c)7013(c)
7013(d)7013(d)
7013(e)7013(e)
7013(e)(1)7013(e)(1)
7013(e)(2)7013(e)(2)
7013(e)(3)7013(e)(3)
7013(e)(3)(A)7013(e)(3)(A)
7013(e)(3)(B)7013(e)(3)(B)
7013(e)(3)(C)7013(e)(3)(C)
7013(e)(3)(D)7013(e)(3)(D)
7013(f)7013(f)
7013(f)(1)7013(f)(1)
7013(f)(2)7013(f)(2)
7013(g)7013(g)
7013(g)(1)7013(g)(1)
7013(g)(2)7013(g)(2)
7013(h)7013(h)
7014Notice of Right to Limit and the “Limit the Use of My Sensitive Personal Information” Link.
7014(a)7014(a)
7014(b)7014(b)
7014(c)7014(c)
7014(d)7014(d)
7014(e)7014(e)
7014(e)(1)7014(e)(1)
7014(e)(2)7014(e)(2)
7014(e)(3)7014(e)(3)
7014(e)(3)(A)7014(e)(3)(A)
7014(e)(3)(B)7014(e)(3)(B)
7014(e)(3)(C)7014(e)(3)(C)
7014(e)(3)(D)7014(e)(3)(D)
7014(f)7014(f)
7014(f)(1)7014(f)(1)
7014(f)(2)7014(f)(2)
7014(g)7014(g)
7014(g)(1)7014(g)(1)
7014(g)(2)7014(g)(2)
7014(h)7014(h)
7015Alternative Opt-out Link.
7015(a)7015(a)
7015(b)7015(b)
7015(b)(1)7015(b)(1)
7015(b)(2)7015(b)(2)
7015(b)(3)7015(b)(3)
7015(c)7015(c)
7015(c)(1)7015(c)(1)
7015(c)(2)7015(c)(2)
7016Notice of Financial Incentive.
7016(a)7016(a)
7016(b)7016(b)
7016(c)7016(c)
7016(d)7016(d)
7016(d)(1)7016(d)(1)
7016(d)(2)7016(d)(2)
7016(d)(3)7016(d)(3)
7016(d)(4)7016(d)(4)
7016(d)(5)7016(d)(5)
7016(d)(5)(A)7016(d)(5)(A)
7016(d)(5)(B)7016(d)(5)(B)
Article 3 — Business practices for handling consumer requests (145 requirements)
7020Methods for Submitting Requests to Delete, Requests to Correct, and Requests to Know.
7020(a)7020(a)
7020(b)7020(b)
7020(c)7020(c)
7020(d)7020(d)
7020(e)7020(e)
7020(f)7020(f)
7020(f)(1)7020(f)(1)
7020(f)(2)7020(f)(2)
7021Timelines for Responding to Requests to Delete, Requests to Correct, Requests to Know, Requests to Access ADMT, and Requests to Appeal ADMT.
7021(a)7021(a)
7021(b)7021(b)
7022Requests to Delete.
7022(a)7022(a)
7022(b)7022(b)
7022(b)(1)7022(b)(1)
7022(b)(2)7022(b)(2)
7022(b)(3)7022(b)(3)
7022(c)7022(c)
7022(c)(1)7022(c)(1)
7022(c)(2)7022(c)(2)
7022(c)(3)7022(c)(3)
7022(c)(4)7022(c)(4)
7022(d)7022(d)
7022(e)7022(e)
7022(f)7022(f)
7022(f)(1)7022(f)(1)
7022(f)(2)7022(f)(2)
7022(f)(3)7022(f)(3)
7022(f)(4)7022(f)(4)
7022(g)7022(g)
7022(h)7022(h)
7023Requests to Correct.
7023(a)7023(a)
7023(b)7023(b)
7023(b)(1)7023(b)(1)
7023(b)(1)(A)7023(b)(1)(A)
7023(b)(1)(B)7023(b)(1)(B)
7023(b)(1)(C)7023(b)(1)(C)
7023(b)(2)7023(b)(2)
7023(c)7023(c)
7023(c)(1)7023(c)(1)
7023(c)(2)7023(c)(2)
7023(d)7023(d)
7023(d)(1)7023(d)(1)
7023(d)(2)7023(d)(2)
7023(d)(2)(A)7023(d)(2)(A)
7023(d)(2)(B)7023(d)(2)(B)
7023(d)(2)(C)7023(d)(2)(C)
7023(d)(2)(D)7023(d)(2)(D)
7023(d)(3)7023(d)(3)
7023(d)(4)7023(d)(4)
7023(e)7023(e)
7023(f)7023(f)
7023(f)(1)7023(f)(1)
7023(f)(2)7023(f)(2)
7023(f)(3)7023(f)(3)
7023(f)(4)7023(f)(4)
7023(g)7023(g)
7023(h)7023(h)
7023(i)7023(i)
7023(j)7023(j)
7023(k)7023(k)
7024Requests to Know.
7024(a)7024(a)
7024(b)7024(b)
7024(c)7024(c)
7024(c)(1)7024(c)(1)
7024(c)(2)7024(c)(2)
7024(c)(3)7024(c)(3)
7024(c)(4)7024(c)(4)
7024(d)7024(d)
7024(d)(1)7024(d)(1)
7024(d)(2)7024(d)(2)
7024(e)7024(e)
7024(e)(1)7024(e)(1)
7024(e)(2)7024(e)(2)
7024(f)7024(f)
7024(g)7024(g)
7024(h)7024(h)
7024(i)7024(i)
7024(j)7024(j)
7024(k)7024(k)
7024(k)(1)7024(k)(1)
7024(k)(2)7024(k)(2)
7024(k)(3)7024(k)(3)
7024(k)(4)7024(k)(4)
7024(k)(5)7024(k)(5)
7024(k)(6)7024(k)(6)
7024(l)7024(l)
7025Opt-out Preference Signals.
7025(a)7025(a)
7025(b)7025(b)
7025(b)(1)7025(b)(1)
7025(b)(2)7025(b)(2)
7025(c)7025(c)
7025(c)(1)7025(c)(1)
7025(c)(2)7025(c)(2)
7025(c)(3)7025(c)(3)
7025(c)(4)7025(c)(4)
7025(c)(5)7025(c)(5)
7025(c)(6)7025(c)(6)
7025(c)(7)7025(c)(7)
7025(c)(7)(A)7025(c)(7)(A)
7025(c)(7)(B)7025(c)(7)(B)
7025(c)(7)(C)7025(c)(7)(C)
7025(c)(7)(D)7025(c)(7)(D)
7025(c)(7)(E)7025(c)(7)(E)
7025(d)7025(d)
7025(e)7025(e)
7025(f)7025(f)
7025(f)(1)7025(f)(1)
7025(f)(2)7025(f)(2)
7025(f)(3)7025(f)(3)
7025(g)7025(g)
7025(g)(1)7025(g)(1)
7025(g)(2)7025(g)(2)
7025(g)(2)(A)7025(g)(2)(A)
7025(g)(2)(B)7025(g)(2)(B)
7025(g)(2)(C)7025(g)(2)(C)
7025(g)(2)(D)7025(g)(2)(D)
7025(g)(3)7025(g)(3)
7025(g)(3)(A)7025(g)(3)(A)
7025(g)(3)(B)7025(g)(3)(B)
7026Requests to Opt-out of Sale/Sharing.
7026(a)7026(a)
7026(a)(1)7026(a)(1)
7026(a)(2)7026(a)(2)
7026(a)(3)7026(a)(3)
7026(a)(4)7026(a)(4)
7026(b)7026(b)
7026(c)7026(c)
7026(d)7026(d)
7026(e)7026(e)
7026(f)7026(f)
7026(f)(1)7026(f)(1)
7026(f)(2)7026(f)(2)
7026(f)(3)7026(f)(3)
7026(f)(3)(A)7026(f)(3)(A)
7026(f)(3)(B)7026(f)(3)(B)
7026(g)7026(g)
7026(h)7026(h)
7026(i)7026(i)
7026(j)7026(j)
7026(k)7026(k)
Article 4 — Verification of requests (57 requirements)
7027Requests to Limit Use and Disclosure of Sensitive Personal Information.
7027(a)7027(a)
7027(b)7027(b)
7027(b)(1)7027(b)(1)
7027(b)(2)7027(b)(2)
7027(b)(3)7027(b)(3)
7027(b)(4)7027(b)(4)
7027(c)7027(c)
7027(d)7027(d)
7027(e)7027(e)
7027(f)7027(f)
7027(g)7027(g)
7027(g)(1)7027(g)(1)
7027(g)(2)7027(g)(2)
7027(g)(3)7027(g)(3)
7027(h)7027(h)
7027(i)7027(i)
7027(j)7027(j)
7027(k)7027(k)
7027(l)7027(l)
7027(m)7027(m)
7027(m)(1)7027(m)(1)
7027(m)(2)7027(m)(2)
7027(m)(2)(A)7027(m)(2)(A)
7027(m)(2)(B)7027(m)(2)(B)
7027(m)(3)7027(m)(3)
7027(m)(3)(A)7027(m)(3)(A)
7027(m)(3)(B)7027(m)(3)(B)
7027(m)(4)7027(m)(4)
7027(m)(5)7027(m)(5)
7027(m)(6)7027(m)(6)
7027(m)(7)7027(m)(7)
7027(m)(8)7027(m)(8)
7028Requests to Opt-in After Opting-out of the Sale or Sharing of Personal Information or Limiting the Use and Disclosure of Sensitive Personal Information.
7028(a)7028(a)
7028(b)7028(b)
7028(c)7028(c)
7050Service Providers and Contractors.
7050(a)7050(a)
7050(a)(1)7050(a)(1)
7050(a)(2)7050(a)(2)
7050(a)(3)7050(a)(3)
7050(a)(3)(A)7050(a)(3)(A)
7050(a)(3)(B)7050(a)(3)(B)
7050(a)(4)7050(a)(4)
7050(a)(5)7050(a)(5)
7050(b)7050(b)
7050(b)(1)7050(b)(1)
7050(b)(2)7050(b)(2)
7050(c)7050(c)
7050(d)7050(d)
7050(e)7050(e)
7050(f)7050(f)
7050(g)7050(g)
7050(h)7050(h)
7050(h)(1)7050(h)(1)
7050(h)(2)7050(h)(2)
Article 5 — Special rules regarding minors (25 requirements)
7051Contract Requirements for Service Providers and Contractors.
7051(a)7051(a)
7051(a)(1)7051(a)(1)
7051(a)(2)7051(a)(2)
7051(a)(3)7051(a)(3)
7051(a)(4)7051(a)(4)
7051(a)(5)7051(a)(5)
7051(a)(6)7051(a)(6)
7051(a)(7)7051(a)(7)
7051(a)(8)7051(a)(8)
7051(a)(9)7051(a)(9)
7051(b)7051(b)
7051(c)7051(c)
7052Third Parties.
7052(a)7052(a)
7052(b)7052(b)
7053Contract Requirements for Third Parties.
7053(a)7053(a)
7053(a)(1)7053(a)(1)
7053(a)(2)7053(a)(2)
7053(a)(3)7053(a)(3)
7053(a)(4)7053(a)(4)
7053(a)(5)7053(a)(5)
7053(a)(6)7053(a)(6)
7053(b)7053(b)
Article 6 — Non-discrimination (38 requirements)
7060General Rules Regarding Verification.
7060(a)7060(a)
7060(b)7060(b)
7060(c)7060(c)
7060(c)(1)7060(c)(1)
7060(c)(2)7060(c)(2)
7060(c)(3)7060(c)(3)
7060(c)(3)(A)7060(c)(3)(A)
7060(c)(3)(B)7060(c)(3)(B)
7060(c)(3)(C)7060(c)(3)(C)
7060(c)(3)(D)7060(c)(3)(D)
7060(c)(3)(E)7060(c)(3)(E)
7060(c)(3)(F)7060(c)(3)(F)
7060(d)7060(d)
7060(e)7060(e)
7060(f)7060(f)
7060(g)7060(g)
7060(h)7060(h)
7061Verification for Password-Protected Accounts.
7061(a)7061(a)
7061(b)7061(b)
70627062
7062(a)7062(a)
7062(b)7062(b)
7062(c)7062(c)
7062(d)7062(d)
7062(e)7062(e)
7062(e)(1)7062(e)(1)
7062(e)(2)7062(e)(2)
7062(f)7062(f)
7062(g)7062(g)
7063Authorized Agents.
7063(a)7063(a)
7063(a)(1)7063(a)(1)
7063(a)(2)7063(a)(2)
7063(b)7063(b)
7063(c)7063(c)
7063(d)7063(d)
Article 7 — Opt-out preference signals (18 requirements)
7070Consumers Less Than 13 Years of Age.
7070(a)7070(a)
7070(a)(1)7070(a)(1)
7070(a)(2)7070(a)(2)
7070(a)(2)(A)7070(a)(2)(A)
7070(a)(2)(B)7070(a)(2)(B)
7070(a)(2)(C)7070(a)(2)(C)
7070(a)(2)(D)7070(a)(2)(D)
7070(a)(2)(E)7070(a)(2)(E)
7070(a)(2)(F)7070(a)(2)(F)
7070(b)7070(b)
7070(c)7070(c)
7071Consumers at Least 13 Years of Age and Less Than 16 Years of Age.
7071(a)7071(a)
7071(b)7071(b)
7072Notices to Consumers Less Than 16 Years of Age.
7072(a)7072(a)
7072(b)7072(b)
Article 8 — Consumers' right to limit use of sensitive personal information (23 requirements)
7080Discriminatory Practices.
7080(a)7080(a)
7080(b)7080(b)
7080(c)7080(c)
7080(d)7080(d)
7080(d)(1)7080(d)(1)
7080(d)(2)7080(d)(2)
7080(d)(3)7080(d)(3)
7080(d)(4)7080(d)(4)
7080(e)7080(e)
7080(f)7080(f)
7080(g)7080(g)
7081Calculating the Value of Consumer Data.
7081(a)7081(a)
7081(a)(1)7081(a)(1)
7081(a)(2)7081(a)(2)
7081(a)(3)7081(a)(3)
7081(a)(4)7081(a)(4)
7081(a)(5)7081(a)(5)
7081(a)(6)7081(a)(6)
7081(a)(7)7081(a)(7)
7081(a)(8)7081(a)(8)
7081(b)7081(b)