The California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) are landmark pieces of legislation designed to enhance consumer privacy rights in California.
The CCPA, enacted in 2018, grants California residents significant rights regarding their personal information, including the right to know what personal information is being collected, the right to delete personal information, and the right to opt-out of the sale of personal information.
The CPRA, which builds upon the CCPA, further strengthens consumer privacy rights by introducing new provisions such as the right to correct inaccurate personal information and the right to limit the use and disclosure of sensitive personal information. These laws have significant implications for businesses operating both inside and outside of California, requiring them to implement robust data privacy programs, provide consumers with clear and conspicuous privacy notices, and establish procedures for handling consumer requests.
Captain Compliance provides valuable resources and expertise to help organizations understand and comply with the CCPA and CPRA.
For defense counsel and corporate privacy officers, a new name has emerged at the forefront of the California Invasion of Privacy Act (CIPA) litigation surge:
The defense bar is celebrating a major victory in the ongoing war over the California Invasion of Privacy Act (CIPA). On May 27, 2026, Judge
For the past several years, corporate legal departments, chief privacy officers, and data protection leads have operated under a comforting, albeit technical, administrative paradigm. When
If you think clicking “opt out” on a Google, Meta, or Microsoft service actually stops them from tracking you, a new independent audit suggests you
The California Customer Records Act (CRA), codified at Civil Code §1798.80 et seq., is a foundational state data security statute that requires businesses to implement
The Confidentiality of Medical Information Act (CMIA), codified at California Civil Code §56 et seq., is one of the most far-reaching state-level medical privacy statutes
In a landmark ruling with sweeping implications for data privacy litigation in California, the state Supreme Court has established a new legal standard for victims
In the digital health era, the biggest threat to a hospital’s balance sheet isn’t just a data breach—it’s a tracking pixel. While data breaches are
In 2025, U.S. state regulators and private litigants delivered a staggering $3.425 billion in privacy-related fines — a figure that eclipsed the combined total from
The headline CIPA story of the past three years has been the tracking-pixel litigation wave — Meta Pixel cases, session-replay claims, the Javier v. Assurance