CCPA/CPRA § 1798.130
Notice, Disclosure, Correction, and Deletion Requirements
The Privisy audit tests this section. See the checks
- Source
- Statute
- In force from
- January 1, 2026
- Last reviewed
- September 2026
- Framework
- CCPA/CPRA
What it requires
Sets how consumers submit requests to know, delete, and correct. Subdivision (a)(1)(A) requires two or more designated methods, including at a minimum a toll-free telephone number, except that a business that operates exclusively online and has a direct relationship with the consumers it collects personal information from need only provide an email address. Subdivision (a)(1)(B) adds that a business that maintains an internet website must make it available for submitting those requests. Requests to opt out of sale or sharing are governed separately by 11 CCR § 7026(a), which requires two or more designated methods of every business that sells or shares. SB 923 (Becker), signed September 27, 2026, amends (a)(1)(A) so that from January 1, 2027 an exclusively-online business must also offer an online method such as a web form or portal alongside the email address. Until then the text quoted here is the duty in force.
Statute text
(a) In order to comply with Sections 1798.100, 1798.105, 1798.106, 1798.110, 1798.115, and 1798.125, a business shall, in a form that is reasonably accessible to consumers: (1) (A) Make available to consumers two or more designated methods for submitting requests for information required to be disclosed pursuant to Sections 1798.110 and 1798.115, or requests for deletion or correction pursuant to Sections 1798.105 and 1798.106, respectively, including, at a minimum, a toll-free telephone number. A business that operates exclusively online and has a direct relationship with a consumer from whom it collects personal information shall only be required to provide an email address for submitting requests for information required to be disclosed pursuant to Sections 1798.110 and 1798.115, or for requests for deletion or correction pursuant to Sections 1798.105 and 1798.106, respectively. (B) If the business maintains an internet website, make the internet website available to consumers to submit requests for information required to be disclosed pursuant to Sections 1798.110 and 1798.115, or requests for deletion or correction pursuant to Sections 1798.105 and 1798.106, respectively.
California Consumer Privacy Act / California Privacy Rights Act, § 1798.130Read the full section from California Privacy Protection Agency (CalPrivacy)
How Privisy tests it
- Privacy Request Mechanism
An email address alone for an exclusively-online business with a direct consumer relationship; otherwise two or more methods including a toll-free number (§ 1798.130(a)(1)(A)); a website must be available for requests (§ 1798.130(a)(1)(B))
The audit runs this check against your live site and shows the evidence behind every result.
Get Your AuditThis page is for information only and is not legal advice. The excerpt is reproduced from official public sources and was checked against them on the last-reviewed date above. Laws change: check the authoritative source and consult a licensed attorney for compliance guidance.