CCPA
CIPP/US glossary · Last reviewed: · By Victor Humenhuk (CIPP/US certified)
CCPA - California Consumer Privacy Act; its private right of action created statutory damages for breaches caused by failure to maintain reasonable security.
In the CIPP/US body of knowledge, CCPA comes up under Chapter 6: State Comprehensive Privacy Laws; Chapter 7: State Data Breach Notification, Data Security, and Data Destruction Laws.
CCPA in context
- state to pass a comprehensive privacy law: the ==CCPA (enacted 2018, effective Jan 1, 2020)==, later amended and extended by the ==CPRA (passed late 2020, effective Jan 1, 2023)==, which also created the ==CPPA==. (California as First Mover - CCPA and CPRA)
- Enacted via the ==CCPA==, updated by the ==CPRA==. (California Statutory Damages (CCPA/CPRA))
- CCPA/CPRA exempt only GLBA/CFIPA-covered ==datasets==, not whole institutions. (State Financial Privacy: California (CFIPA) and New York (NYDFS))
Where CCPA is covered in the CIPP/US study notes
Related terms
- CPRA
- CPPA
- DPA
- Statutory damages
- 30-day cure period
Test yourself on CCPA
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/US practice questions, or read the full CIPP/US study guide - every study note is free.