AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
California Privacy Law
Coverage from OpenClassActions, Hunton Andrews Kurth LLP, and others
California’s consumer privacy regime is built around the California Consumer Privacy Act and its amendments under the California Privacy Rights Act.
It gives consumers rights including access, deletion, and opting out of the sale or sharing of personal information, while requiring businesses to provide workable notices and processes. The California Privacy Protection Agency’s enforcement has focused on barriers such as excessive identity verification, ineffective opt-out tools, tracking technologies, and confusing interfaces. Compliance also involves inventories, testing, audits, data-broker obligations, governance, and implementation of signals such as Global Privacy Control.
Looking Back
221 Day Timeline
Feb 7
Mar 14
Apr 18
May 30
Jul 4
Aug 8
Sep 12
History
10/03/2026
The current version adds a reported CCPA settlement involving Disney and ABC, associated with California Attorney General Rob Bonta. Otherwise, it reinforces the existing focus on effective opt-out processes rather than materially changing the story.
All Articles54 articles
Important
The California Privacy Protection Agency and California Attorney General expanded CPRA enforcement and compliance requirements across California during 2025 and 2026.
8/21/2026 • Regulation, Law & Enforcement • General
CalPrivacy announced a July 21, 2026 CCPA compliance audit of gig economy platforms in California to test right-to-know fulfillment and 45-day response timelines.
7/21/2026 • Regulation, Law & Enforcement • General
CalPrivacy began a first CCPA privacy audit of gig platforms in California to verify timely, complete access to personal information for consumers and independent contractor workers.
7/21/2026 • Regulation, Law & Enforcement • General
CPPA rules in California require qualifying businesses to file Section 7150 risk assessments and annual Section 7120 cybersecurity audits, tightening accountability for personal data processing.
6/12/2026 • Regulation, Law & Enforcement • General
Rob Bonta and California regulators announced and expanded enforcement actions in 2025-2026, driving U.S. privacy penalties to $3.45 billion in 2025.
5/19/2026 • Regulation, Law & Enforcement • General
California Attorney General Rob Bonta announced July 2023 inquiries into large employers CCPA compliance for employee and job applicant personal data.
4/21/2026 • Regulation, Law & Enforcement • General
California's CPPA issued privacy risk assessment and annual cybersecurity audit requirements for covered businesses, with compliance coverage starting in 2026 and first submissions due in 2028.
6/19/2026 • Regulation, Law & Enforcement • General
California regulator CalPrivacy issued a 375,703 enforcement order against Ford for email verification barriers to opt-out under the CCPA.
3/16/2026 • Regulation, Law & Enforcement • General
Emotilink disclosed California residents’ telehealth data practices, retention periods, service-provider disclosures, and CCPA and CPRA rights in its California privacy notice.
9/15/2026 • Regulation, Law & Enforcement • General
California lawmakers and regulators established CCPA and CPRA obligations from 2018 through 2023 for covered businesses collecting California residents' data, with enforcement and breach litigation possible in California.
7/31/2026 • Regulation, Law & Enforcement • General
CalPrivacy and state attorneys general expanded investigations in 2025 and early 2026 into CPRA opt out processing practices in California.
6/26/2026 • Regulation, Law & Enforcement • General
webXray reported March opt-out noncompliance by Google, Meta, and Microsoft in California under CCPA and CPRA enforcement frameworks tied to Global Privacy Control.
4/14/2026 • Regulation, Law & Enforcement • General
California Privacy Protection Agency announced settlements with PlayOn Sports and Ford Motor Co under the CCPA in California last week.
3/11/2026 • Regulation, Law & Enforcement • General
CPPA regulators in California require annual cybersecurity audits and risk assessments beginning 2026 for high risk processing.
3/10/2026 • Regulation, Law & Enforcement • General
California privacy regulator settles 1.1 million USD with PlayOn Sports in California over delayed opt-out updates under CCPA CPRA.
3/6/2026 • Regulation, Law & Enforcement • General
The California Privacy Protection Agency finalized California Consumer Privacy Act cybersecurity audit regulations in 2025, requiring certain high-risk businesses in California to undergo independent annual cybersecurity audits.
2/7/2026 • Regulation, Law & Enforcement • General
California AG and CalPrivacy step up 2026 privacy enforcement on sensitive data, automated decisionmaking, dark patterns, data broker deletion through DROP, and revised breach-notice timing under SB 446.
3/18/2026 • Regulation, Law & Enforcement • General
From January 1, 2026, California Consumer Privacy Act regulations require covered employers to complete documented privacy risk assessments before specified data processing activities.
3/17/2026 • Regulation, Law & Enforcement • General
California Privacy Protection Agency actions target opt-out failures by PlayOn Sports and Ford Motor Co in 2024-2025 under the California CCPA.
3/12/2026 • Regulation, Law & Enforcement • General
California regulators and CalPrivacy finalize CCPA regulations and data broker obligations in 2026 in California.
3/12/2026 • Regulation, Law & Enforcement • General
CalPrivacy enforcement against Ford in California in 2025 focuses on opt-out friction and tracking technology audits under CCPA.
3/10/2026 • Regulation, Law & Enforcement • General
A WIRED test found that more than 100 companies sometimes misclassified California residents' data access requests as deletion or opt-out requests during a weeklong review.
8/30/2026 • Consumer Privacy & Digital Rights • General
California Privacy Protection Agency enforcement during 2025 and early 2026 targets opt-out processing that requires unnecessary identity verification or extra consumer information.
6/26/2026 • Consumer Privacy & Digital Rights • General
Healthmatch.io issued a California CCPA/CPRA privacy notice covering health-data collection for clinical trial matching, sharing opt-outs, and automated matching opt-out rights.
5/10/2026 • Consumer Privacy & Digital Rights • General
California Attorney General Rob Bonta announced July 2023 investigative outreach into large employers after the CCPA employee data exemption ended January 1, 2023.
4/21/2026 • Consumer Privacy & Digital Rights • General
Interesting
California lawmakers and regulators require covered businesses nationwide to protect residents' personal information and face penalties or litigation for CCPA and CPRA violations.
7/31/2026 • Regulation, Law & Enforcement • General
Roti Holdings, LLC provides a CCPA as amended by CPRA notice for California residents describing tracking opt-out, retention periods, and consumer rights.
5/1/2026 • Regulation, Law & Enforcement • General
California Attorney General Rob Bonta announced a $2.75 million settlement with The Walt Disney Company after 2024 findings of incomplete CCPA opt-out compliance for streaming consumers.
3/20/2026 • Regulation, Law & Enforcement • General
California Privacy Protection Agency Board fined PlayOn Sports last week in California for tracking opt-out failures and insufficient notices.
3/16/2026 • Regulation, Law & Enforcement • General
CalPrivacy enforcement actions and GPC opt-out signals shape CCPA enforcement in California during 2024 actions and 2026 rulemaking invitation.
3/16/2026 • Regulation, Law & Enforcement • General
LVC Beverly Hills informs California residents about CPRA rights and personal data practices through its privacy policy and accepts verified requests by email or contact form.
8/24/2026 • Consumer Privacy & Digital Rights • General
JobMarketJockey described California residents' CCPA access, deletion, and sale opt-out rights in its California privacy statement, covering personal-information practices during the previous 12 months.
8/20/2026 • Consumer Privacy & Digital Rights • General
Fat Fender Garage provides users worldwide with an online Privacy Center for identity-verified data rights requests, consent withdrawal, and regional opt-out choices.
8/13/2026 • Consumer Privacy & Digital Rights • General
GleamFable published a California privacy statement explaining CCPA access, deletion, opt-out, verification, and nondiscrimination rights for California residents.
8/11/2026 • Consumer Privacy & Digital Rights • General
TackGP disclosed its recent privacy practices, reporting limited contact-form and server-log collection, hosting-provider storage, and California rights procedures from its website operations.
8/10/2026 • Consumer Privacy & Digital Rights • General
Postiv published a California privacy notice describing personal-information collection and CCPA and CPRA rights for California residents.
8/9/2026 • Consumer Privacy & Digital Rights • General
DispatchHealth provides website visitors with privacy-request procedures and California rights, including deletion, correction, sale opt-out, and cookie-related choices through its website.
7/31/2026 • Consumer Privacy & Digital Rights • General
California Privacy Protection Agency and other U.S. enforcers increased investigations in 2025 and early 2026, targeting opt-out workflows that require unnecessary identity checks.
6/26/2026 • Consumer Privacy & Digital Rights • General
CalPrivacy settled with PlayOn Sports on Feb. 27 for alleged CPRA tracker and opt-out notice failures on a California ticketing platform.
4/27/2026 • Regulation, Law & Enforcement • General
Disney settles with California Attorney General over opt-out failures under CCPA in California.
2/18/2026 • Regulation, Law & Enforcement • General
The California Privacy Protection Agency advanced opt-out and data broker rulemaking in California on August 6-7, 2026, expanding compliance and enforcement requirements.
8/17/2026 • Regulation, Law & Enforcement • General
Californians in California in the 2020s adopt encryption and data minimization to reduce personal data exposure.
3/5/2026 • Consumer Privacy & Digital Rights • General
805 Beer disclosed device-identifier collection and privacy-rights procedures for users in California and other applicable jurisdictions through its privacy notice.
8/20/2026 • Consumer Privacy & Digital Rights • General
A privacy notice provides consumers in the United States with CCPA procedures for submitting and verifying access, portability, disclosure, and deletion requests.
8/8/2026 • Consumer Privacy & Digital Rights • General
Bird provides California residents CCPA request options to access, correct, delete, and opt out of personal-data sale or sharing.
7/24/2026 • Consumer Privacy & Digital Rights • General
Upward Advisory issued CCPA-related disclosures for California residents, detailing access, deletion, and identity-verification steps and stating no personal information sales.
7/21/2026 • Consumer Privacy & Digital Rights • General
Northgate issues a CCPA/CPRA notice for California residents describing collected data categories, rights to access and delete, and an identity verification-based request process.
6/13/2026 • Consumer Privacy & Digital Rights • General
ASP-RCM Solutions issued a CCPA and CPRA privacy notice effective May 2026 describing California resident data collection and privacy request procedures.
5/30/2026 • Consumer Privacy & Digital Rights • General
California updates privacy compliance rules from 2026, requiring CCPA-covered businesses to honor and confirm opt-out signals like Global Privacy Control.
3/25/2026 • Consumer Privacy & Digital Rights • General
California businesses meeting specified revenue, data-volume, or processing criteria must complete cybersecurity audits and privacy risk assessments under regulations effective January 1, 2026.
8/17/2026 • Regulation, Law & Enforcement • General
California voters approved CPRA in 2020, expanding CCPA with sensitive data protections, a right to correction, and behavioral advertising sharing opt-out as CPPA enforcement begins July 1, 2023.
7/23/2026 • Regulation, Law & Enforcement • General
KBR provides California residents with a CPRA request form for access, correction, deletion, and applicable opt-out requests through KBR's California privacy process.
6/12/2026 • Consumer Privacy & Digital Rights • General
Inaba Foods explains California residents' privacy rights and request procedures under CCPA, CPRA, and Shine the Light requirements in California.
6/3/2026 • Consumer Privacy & Digital Rights • General
Cal.com documents privacy governance, customer-data protections, vendor oversight, and incident-response controls in its Trust Center for customer evaluation.
8/20/2026 • Corporate Data Practices & Accountability • General