The California Consumer Privacy Act (2020) gives California residents rights over their personal information, and was significantly expanded by the California Privacy Rights Act (CPRA), effective 2023.
Covered businesses must let consumers know what data is collected, delete it on request, and opt out of its sale or sharing — and CPRA added a right to correct inaccurate data and stricter rules for sensitive personal information. CPRA also created a first-of-its-kind dedicated enforcement agency, the California Privacy Protection Agency (CPPA).
CPRA took effect
California Privacy Protection Agency
Cal. Civ. Code §1798.100 et seq.