CCPA Explained: Your California Privacy Rights and How to Use Them
If you are a California resident, the CCPA gives you powerful rights over your personal data. Here is what the law covers, what it does not, and how to use it.
The California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), give California residents some of the strongest data privacy rights in the United States.
If you live in California, you have the right to know what personal data companies have about you, the right to delete it, the right to correct inaccurate data, and the right to opt out of its sale.
Your Key Rights Under CCPA
Right to Know: You can request that any business subject to CCPA disclose what personal information they have collected about you, where it came from, and who they have shared it with.
Right to Delete: You can request that businesses delete your personal information, with limited exceptions for legal compliance, security, and completing transactions.
Right to Opt-Out of Sale: You can tell businesses not to sell or share your personal information to third parties.
Right to Non-Discrimination: Businesses cannot deny you services or charge you higher prices for exercising your CCPA rights.
How to Exercise Your CCPA Rights Against Data Brokers
California law requires data brokers to register with the California Privacy Protection Agency and honor deletion requests. To submit a request: visit the broker's website and look for 'Do Not Sell My Personal Information' link (required by law), or submit a written request including your name and California residency.
Brokers must respond within 45 days. If they fail to respond or deny your request without justification, you can file a complaint with the California Privacy Protection Agency (cppa.ca.gov).
CypherAvoid's removal requests for California users include CCPA Article references, which increases compliance rates and reduces response times.
Run Exposure Scan
Check your current data broker and dark web exposure — free scan, no account required.