ComparisonCCPA

California CCPA vs CPRA

Compare the original CCPA and the CPRA amendments using the deltas that change real implementation work.

Grounded in the California statute, CPPA regulations, and current California enforcement themes.

Author
Sorena AI
Published
Feb 21, 2026
Updated
Feb 21, 2026
Sections
3

Structured answer sets in this page tree.

Primary sources
4

Cited legal and guidance references.

Publication metadata
Sorena AI
Published Feb 21, 2026
Updated Feb 21, 2026
Overview

Many California privacy programmes still carry CCPA era assumptions from 2020 or 2021. The current regime is the CCPA as amended by the CPRA, and the operational differences are material.

Section 1

Rights and definitions that changed

CPRA added the right to correct, created the right to limit certain uses of sensitive personal information, and expanded the concept of sharing for cross context behavioural advertising.

  • Update old rights portals so correction and limit flows are not missing
  • Replace opt out language that talks only about sale and ignores sharing
  • Review whether the old threshold analysis still uses the 50,000 figure
  • Refresh contract templates to include contractor and third party obligations
Section 2

Enforcement and governance changes

CPRA created the California Privacy Protection Agency as a dedicated regulator and removed the guaranteed 30 day cure period.

  • Track CPPA rulemaking and not only Attorney General materials
  • Assume cure is discretionary and not a safe harbour
  • Keep enforcement evidence ready for requests, audits, or sweeps
  • Review old training that still describes the regulator structure inaccurately
Section 3

Why the distinction still matters

Businesses still search for CCPA guidance and contracts still use CCPA terminology, but implementation work should be built to the current amended regime.

  • Treat the current law as one amended California privacy regime
  • Update policies, notices, and engineering tickets to current rights and definitions
  • Retire legacy references that ignore sharing, SPI, or the CPPA
  • Use the comparison page when cleaning up old privacy documentation
Recommended next step

Use California CCPA vs CPRA as a cited research workflow

Research Copilot can take California CCPA vs CPRA from how this topic compares with adjacent regulations or standards to a reusable workflow inside Sorena. Teams working on California CCPA can keep owners, evidence, and next steps aligned without copying this guide into separate documents.

Primary sources

References and citations

cppa.ca.gov
Referenced sections
  • Rulemaking and effective date updates.
cppa.ca.gov
Referenced sections
  • Official California FAQ.
cppa.ca.gov
Referenced sections
  • Official California regulations hub.
Related guides

Explore more topics

CCPA Applicability Test | California Scope Test
Test whether a business is in scope under the current California threshold model.
CCPA Checklist | California Privacy Compliance Checklist
Track the California controls that must actually exist in policy, product, and vendor operations.
CCPA Compliance Program | California Operating Model
Build a California privacy programme that survives regulator questions and product change.
CCPA Consumer Rights Workflow | 45 Day Request Handling
Run California rights operations with clear timing, verification, and downstream instructions.
CCPA Deadlines and Compliance Calendar
Use the dates that actually shape California privacy work.
CCPA Enforcement and Penalties | CPPA and AG Exposure Guide
Understand how California enforcement usually starts and what evidence the agency will ask for.
CCPA FAQ | Practical California Privacy Answers
Answer the California privacy questions that usually stall implementation.
CCPA Penalties and Fines | California Exposure Summary
Know the penalty ranges, then work backward to the controls that reduce them.
CCPA Privacy Notices and Disclosures | California Notice Architecture
Design the California notice stack so each disclosure appears in the right place and says the right thing.
CCPA Privacy Policy Template | Required California Disclosures
Write a California privacy policy that actually matches the statute and regulations.
CCPA Requirements | California Control Requirements
Translate California law into control statements that can be implemented, tested, and audited.
CCPA Scope and Thresholds | California Business Threshold Guide
Use the real California threshold tests instead of rough privacy folklore.
CCPA Service Provider and Contractor Contracts
Draft California vendor contracts that work in practice, not only on paper.
CCPA vs GDPR | California and EU Privacy Comparison
Compare California CCPA obligations with the GDPR without assuming the two models are interchangeable.
Do Not Sell or Share Implementation | CCPA and GPC Guide
Implement California opt out controls that actually work across websites, apps, and partner pipelines.