California · Privacy Notice
California Privacy Rights Request
California's Consumer Privacy Rights Act (CPRA, effective January 2023) grants California residents the most comprehensive privacy rights in the United States. You have the right to know what personal data businesses collect about you, request deletion, correct inaccuracies, opt out of the sale or sharing of your data, and limit use of sensitive personal information. A formal privacy notice or data subject request letter citing Cal. Civ. Code § 1798.100 triggers a legal obligation to respond within 45 days.
California's CPRA (effective Jan 2023) is the strongest consumer privacy law in the US, giving you the right to know, delete, correct, opt out of sale, and limit use of sensitive personal information.
Governing law
Cal. Civ. Code § 1798.100 et seq. (CCPA/CPRA)
Start Your California Privacy Rights Request
Cites Cal. Civ. Code § 1798.100 et seq. (CCPA/CPRA). Formatted for USPS Certified Mail. Instant PDF.
Start My Letter →Instant PDF download
California Privacy Notice FAQs
What rights do I have under the CPRA?▾
Under Cal. Civ. Code § 1798.100 et seq.: Right to know (what data is collected and shared), Right to delete, Right to correct, Right to opt out of sale or sharing, Right to limit use of sensitive personal information, Right to non-discrimination for exercising rights. Businesses covered (revenue 25M+ or data on 100K+ consumers) must respond within 45 days.
How do I make a formal privacy rights request?▾
Send a written request to the business's privacy email (required to be provided under § 1798.130) specifying which right(s) you are exercising. For deletion, explicitly state you are exercising your 'Right to Delete' under Cal. Civ. Code § 1798.105. Include enough identifying information for the business to verify your identity.
What if the business ignores my request?▾
File a complaint with the California Privacy Protection Agency (cppa.ca.gov). The CPPA can impose penalties of $2,500 per unintentional violation and $7,500 per intentional violation. For data breaches involving non-encrypted personal information, the CPRA also provides a private right of action under § 1798.150.
kweldoc is a document drafting tool, not a law firm.