Privacy Policy Clause: Description of Consumer Rights
(CCPA and CPRA Compliant)

Summary

This clause discloses rights granted to consumers under the California Consumer Privacy Act (CCPA), as amended and expanded by the California Privacy Rights Act (CPRA). Under the CCPA/CPRA, covered entities are required to include a description of these rights in their privacy policies. Cal. Civ. Code §1798.130(a)(5)(A). This clause includes practical guidance and drafting notes. The CCPA was signed into law on June 28, 2018. Its substantive privacy requirements took effect on January 1, 2020, and became fully enforceable on July 1, 2020. The CCPA introduced substantial amendments to consumer privacy and data protection law in California. On November 3, 2020, California voters approved Proposition 24, which enacted the California Privacy Rights Act of 2020 (CPRA). The CPRA amends and expands the CCPA, and goes into effect on January 1, 2023. Businesses must comply with CPRA changes to the CCPA after the CPRA's effective date. For a full listing of related data security & privacy content for first-year associates, see First-Year Associate Resource Kit: Data Security and Privacy. For additional content related to the CCPA and CPRA, see Privacy Policy Clause: Description of Consumer Rights (CCPA and CPRA Compliant). For a full listing of related California consumer privacy content, see California Consumer Privacy Resource Kit (CCPA and CPRA). For more information regarding the CCPA and important definitions, see California Consumer Privacy Act (CCPA) Overview (Archived). For more information on the CPRA, see California Voters Approve Proposition 24's Expansion of Data Privacy Protection. For additional privacy policy disclosure requirements, see Privacy Policy Clause: Disclosure of Personal Information Collected (CCPA and CPRA Compliant) and Privacy Policy Clause: How to Exercise Your Rights (CCPA and CPRA Compliant). For a CCPA-compliant only version of this clause, see Privacy Policy Clause: Description of Consumer Rights (CCPA Compliant) (Archived). To compare state laws on consumer privacy, see the Consumer Data Privacy topic in the Data Security & Privacy State Law Comparison Tool.