Industry-specific template
California CCPA/CPRA Compliance Privacy Policy Generator
The CCPA/CPRA gives California consumers specific privacy rights including the right to know, delete, opt-out of sale, and limit use of sensitive personal information. Businesses meeting revenue or data volume thresholds must comply.
Why this template is tailored for California CCPA/CPRA Compliance
Teams in California CCPA/CPRA Compliance usually process consumer identifiers and contact data, internet activity and browsing history, geolocation data, and related records often pass through external tools. This page focuses on practical clauses for those workflows so your first draft is closer to operational reality.
The generator maps your answers to clauses around collection scope, permitted use, liability boundaries, and rights handling. You can preview the draft and then export a branded PDF for legal review.
Common Data Collected
- Consumer identifiers and contact data
- Internet activity and browsing history
- Geolocation data
- Commercial information and purchase history
- Sensitive personal information
Typical Regulations
- CCPA
- CPRA
- California Privacy Rights Act regulations
Example Clause Preview
Under CCPA/CPRA, California consumers have the right to know what personal information we collect, request deletion, opt out of sale or sharing, and limit use of sensitive personal information.
FAQ
Which businesses must comply with CCPA/CPRA?
Businesses with over $25M revenue, processing data of 100,000+ consumers, or deriving 50%+ revenue from selling personal information.
What is the difference between CCPA and CPRA?
CPRA amended CCPA to add sensitive personal information protections, create the California Privacy Protection Agency, and expand consumer rights.
Do I need a 'Do Not Sell My Personal Information' link?
Yes. If you sell or share personal information, you must provide a clear opt-out link on your website.
What are the penalties for CCPA violations?
Up to $7,500 per intentional violation and $2,500 per unintentional violation, enforced by the California Privacy Protection Agency.