CCPA

The California Consumer Privacy Act (CCPA), effective 2020 and expanded by the CPRA in 2023, is California's comprehensive privacy law. It gives California consumers rights to know what personal information businesses collect, request deletion, opt out of sale or sharing, and limit the use of sensitive personal information. The CPRA created the California Privacy Protection Agency (CPPA), which has issued draft regulations specifically targeting automated decision-making and AI. Proposed CPPA rules would require pre-use notices, opt-out rights, and access rights for AI-driven decisions about employment, education, housing, healthcare, financial services, and other significant areas. Real-world enforcement examples include Sephora's $1.2M settlement and DoorDash's $375K settlement. AI governance, AI compliance, and AI risk management programs serving California consumers — and indirectly, anyone in the U.S. market — must monitor CCPA/CPRA developments closely as part of responsible AI strategy and enterprise AI deployment compliance posture.

Centralpoint Supports CCPA-Aligned AI Programs: Oxcyon's Centralpoint AI Governance Platform produces the audit logs and consumer-rights infrastructure CCPA increasingly demands — across OpenAI, Gemini, Llama, and embedded models. Centralpoint meters consumption, keeps prompts and skills on-prem, and embeds privacy-aware chatbots into your portals via one JavaScript line.


Related Keywords:
CCPA,,