US
CCPA and CCPA 2026
The California Consumer Privacy Act, as amended by the CPRA, including the 2026 regulations.
Who it applies to
Businesses that handle personal information of California residents above the law's thresholds.
What it can cost
Lost deals, failed audits and penalties set by your regulator or contract.
- Amended by
- The CPRA
- Enforced by
- California Privacy Protection Agency and Attorney General
- Covers
- Personal information of California residents
What CCPA and CCPA 2026 asks of you
- 01Consumer rights to know, delete and correct
- 02Opt-out of sale and sharing
- 03Notices at collection
- 04Reasonable security
- 05Service provider contracts
- 06Risk assessments and cybersecurity audits
How orta covers CCPA and CCPA 2026
12 CCPA and CCPA 2026 requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
