US · California · CCPA
California Consumer Privacy Act (as amended by CPRA)
The CCPA gives California consumers rights over personal information that businesses collect. Engineering work centres on rights requests and honouring opt-outs, including Global Privacy Control signals.
Example findingrulefix scan --format json
{
"rule": "ccpa.gpc-header",
"framework": "CCPA",
"severity": "high",
"file": "app/api/signup.ts",
"check": "GPC header handling",
"status": "failed",
"fix": { "available": true, "files": 2 }
}Key requirements
What CCPA expects from engineering.
- 01
Right to know
Disclose the categories and specific pieces of personal information collected.
- 02
Right to delete and correct
Delete or correct personal information on verified request.
- 03
Opt-out of sale or sharing
Provide a clear opt-out and honour Global Privacy Control signals.
- 04
Sensitive personal information
Let consumers limit use of sensitive personal information.
- 05
Notice at collection
Inform consumers at or before the point of collection.
- 06
Reasonable security
Implement reasonable security procedures and practices.
What RuleFix checks
Turned into code rules.
- GPC header handling
- Third-party sharing without opt-out
- Deletion across downstream systems
- Notice at collection on forms
- Sensitive data use limits
Official sources
Read the source.
RuleFix links to primary sources so you can check the requirements yourself. We are not affiliated with these bodies.
Other frameworks
Cover more with the same workflow.
DPDP
GDPR
LGPD
Ship AI-powered products
that are compliant by design.
Join developers building with RuleFix.