CaliforniaCaliforniaLawAB 375

California Consumer Privacy Act of 2018 (CCPA)

Creates the California Consumer Privacy Act, giving residents rights to know, delete and opt out of the sale of personal information that businesses collect about them.

Body

California Legislature

Session

2017-2018

Introduced

Feb 9, 2017

In effect since

Jan 1, 20206y6 years ago

Votes

Assembly 77-0, Senate 36-0, Assembly concurrence 73-0

Sponsors

D (Democrat)Democrat

Topics

PrivacyData

Related

California

CaliforniaSB 903

Mental Health Professionals: Artificial Intelligence

Would limit the use of AI in psychotherapy services to administrative or supplementary support and bar training models on psychotherapy data in ways inconsistent with confidentiality law.

VetoedSep 30

California

Californiaunverified

Wearable technology privacy bill

This bill would have regulated wearable technology devices to address privacy concerns.

VetoedSep 30

California

CaliforniaSB 923

Consumer Privacy: Deletion Requests

Would expand the CCPA right to delete to all personal information a business has collected about a consumer and require businesses to offer an online method for submitting privacy requests.

EnactedSep 27

California

CaliforniaAB 883

Data Brokers: Deletion Mechanism: Elected Officials and Judges

Would shorten the Delete Act processing cycle for data brokers from 45 to 30 days and require notice to elected officials and judges that they can use the deletion mechanism.

EnactedSep 27

California

CaliforniaAB 2246

Online Services Accessed by Children

Repeals the enjoined Age-Appropriate Design Code Act and replaces it with similar duties requiring online services likely to be accessed by children to take reasonable steps to prevent specified risks of harm.

EnactedSep 10

California

CaliforniaSB 362

Delete Act

Requires data brokers to register with the California Privacy Protection Agency and to process consumer deletion requests submitted through a single state-run deletion mechanism.

In forceAug 1

California

CaliforniaAB 2273

California Age-Appropriate Design Code Act

Requires online services likely to be accessed by children to assess and mitigate risks to children and to configure default privacy settings to a high level of privacy.

In forceMar 12

California

California

CCPA Regulations on Automated Decisionmaking Technology, Risk Assessments and Cybersecurity Audits

Regulations that give consumers rights to access and opt out of businesses' use of automated decisionmaking technology and require certain businesses to conduct risk assessments and annual cybersecurity audits.

AdoptedJan 1

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.