North AmericaSigned into law on June 28, 2018. Effective January 1, 2020.

California Consumer Privacy Act

A state statute intended to enhance privacy rights and consumer protection for residents of California, United States. It provides Californian consumers with the right to know, delete, and opt-out of the sale of their personal information.

Last Indexed via EchelonGraph Automations: March 4, 2026

Global Scope & Applicability

For-profit businesses that do business in California and meet certain revenue or data processing thresholds.

Core Principles & Obligations

  • 1

    Right to Know

  • 2

    Right to Delete

  • 3

    Right to Opt-Out of Sale

  • 4

    Right to Non-Discrimination

Technical Implementation Examples

  • Automated detection of unencrypted AWS S3 buckets violating California Consumer Privacy Act policies.

  • Real-time interception of unauthorized IAM role escalation attempts.

  • Continuous audit logging and Zero-Knowledge Proof attestation of compliant clusters.

Non-Compliance Penalties

Financial Fines

$2,500 per unintentional violation, and $7,500 per intentional violation.

Legal Liability

Private right of action for data breaches, allowing statutory damages of $100 to $750 per consumer per incident.

Master North America Compliance with EchelonGraph

We are building the ultimate continuous compliance platform. Our upcoming AI agents will automatically map your cloud footprints against these precise California Consumer Privacy Act legal controls, alerting you to architectural drift before auditors do.

Join the Developer Waitlist
California Consumer Privacy Act Compliance Matrix & Requirements | EchelonGraph