What the CCPA, CPRA, and neighboring California laws require, explained in plain language with the statute cited.
12 articles, newest first
If your site sells or shares personal information, the homepage link is the first thing checked. What section 7013 requires, how the section 7015 alternative works, and where sites commonly fall short.
The Supreme Court heard argument on October 14 in a case about who counts as a consumer under the Video Privacy Protection Act. If your site plays video and runs an ad pixel, here is what to check while the Court decides.
Since January 1, 2026, California's regulations require a site to show visitors that their opt-out signal was processed. Here is what the rule says, what counts, and how to test it.
No CCPA provision requires a cookie consent banner. California asks for a notice at collection, a working opt-out link, and honored opt-out signals. Here is what that means for your site, and when a banner still helps.
Connecticut's second round of Data Privacy Act amendments takes effect October 1, 2026. Selling precise geolocation data is banned, purpose limitation tightens, and data brokers must register. Here is what changes on your website.
Governor Newsom signed AB 883 and AB 2561 on September 27, 2026. Data brokers get 30 days instead of 45 to work DROP deletion requests, and apps and operating systems can no longer quietly reset a privacy setting a user turned on. Both take effect January 1, 2027.
The provisions these articles turn on, with the text and a plain-language summary of each.
Put it to work
The free check sends a real GPC signal to one URL and shows whether marketing trackers stop. The full audit runs free from our homepage with no account; paying unlocks its evidence.