CCPA and CPRA (California Privacy) Jobs

The California Consumer Privacy Act (CCPA), in effect since 2020 and significantly expanded by the California Privacy Rights Act (CPRA) from January 2023, is the most influential state privacy law in the United States. It gives California residents rights to know, delete, correct, and opt out of the sale or sharing of their personal information, and it created a dedicated regulator, the California Privacy Protection Agency, to enforce and make rules. The CPRA added protections for sensitive personal information and obligations around data minimization, retention, and risk assessments.

California set the pattern that Virginia, Colorado, Connecticut, Texas, and a growing list of states have adapted, so a CCPA/CPRA program is usually the foundation of a US multistate privacy operation. For privacy and governance professionals, it is the most commonly required US framework after the GDPR, and the two together cover most of the global privacy map.