CCPA
The California Consumer Privacy Act (CCPA) is a data privacy regulation enacted by the state of California, granting California consumers the rights to know about, access, delete, and opt out of the sale of their personal information. The regulation applies to businesses operating in California that meet specific criteria and is one of the most representative state-level privacy laws in the United States, establishing clear compliance requirements for enterprise data collection, processing, and sharing practices.
Core Facts
Article 17 of the GDPR grants users the 'Right to Erasure,' requiring companies to delete users' personal data upon request.
The United States lacks a unified comprehensive privacy law at the federal level; California's CCPA/CPRA grants consumers the right to know, the right to delete, and the right to opt out of data sales, and Virginia, Colorado, Connecticut, and other states have passed similar legislation.
California was the first to pass the Consumer Privacy Act (CCPA) in 2018.
Timeline (last 90 days)
The GDPR has become a template for global privacy legislation, with Brazil's LGPD and California's CCPA both influenced by it.
Under the frameworks of the GDPR, the CCPA, and China's Personal Information Protection Law, automated decision-making must meet requirements such as notice and consent and the right to opt out.
Production speech applications need to address four issues: latency, cost, privacy (GDPR/CCPA compliance), and scalability.
Regulations such as GDPR and CCPA grant users the right to access and delete data, but actual enforcement depends on the vendor's processes.
Browser fingerprinting is personal data and under the GDPR, CCPA, and China's Personal Information Protection Law frameworks generally requires notice and a legal basis; for anti-fraud purposes, legitimate interest in security and abuse prevention can be invoked, but the principle of minimum necessity should be followed and only hashes should be stored.
When building smart menus, developers should collect ingredient lists, recipes and preparation methods in structured formats such as JSON and CSV, accumulate historical order data for personalization, and ensure compliance with privacy regulations such as GDPR and CCPA.
California's CCPA focuses on notice, opt-out mechanisms, and data portability.
Common privacy practices for emotion-voice apps include prioritizing on-device processing, not using data for model training by default, providing export and complete deletion entry points, and following data minimization principles under frameworks such as GDPR and CCPA.
Test logs, DOM snapshots, and network traces often contain sensitive payloads, OAuth bearer tokens, PII, or internal infrastructure URLs, and passing raw context to an external LLM provider means significant compliance risk, requiring a strict sanitization layer before model ingestion.
In addition to GDPR, developers also need to pay attention to local regulations in different markets, such as China's Personal Information Protection Law and the US CCPA.
30 more timeline events
All Facts (20)
Article 17 of the GDPR grants users the 'Right to Erasure,' requiring companies to delete users' personal data upon request.
75%VerifiedThe United States lacks a unified comprehensive privacy law at the federal level; California's CCPA/CPRA grants consumers the right to know, the right to delete, and the right to opt out of data sales, and Virginia, Colorado, Connecticut, and other states have passed similar legislation.
70%VerifiedCalifornia was the first to pass the Consumer Privacy Act (CCPA) in 2018.
70%VerifiedThe concept of data sovereignty is affirmed in regulations such as GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act)
65%VerifiedGDPR explicitly stipulates the legal bases for data processing and restrictions on cross-border transfers, requiring data controllers to demonstrate the legal basis for their processing activities
65%VerifiedOpen-source solutions allow enterprises to run all components in private environments, meeting compliance requirements such as SOC 2, GDPR, and HIPAA while achieving audit transparency
65%VerifiedCustomer usage behavior, payment capability, and business scale data aggregated by billing systems constitute sensitive information requiring strict control under data privacy regulatory frameworks such as GDPR and CCPA.
65%VerifiedVoice data constitutes biometric information and is subject to strict protection under regulatory frameworks such as GDPR and CCPA.
65%Unverified成熟的企业级AI工具通常需要提供SOC 2 Type II认证、数据处理协议（DPA）以及私有化部署选项
85%UnverifiedGDPR, China's Data Security Law and Personal Information Protection Law, and the U.S. HIPAA regulations impose strict restrictions on data storage, transmission, and processing, with non-compliance fines potentially reaching tens of millions to hundreds of millions of euros.
60%UnverifiedVoiceprints have been explicitly classified as sensitive biometric data by the EU's GDPR and China's Personal Information Protection Law.
60%UnverifiedApple's account deletion policy originates from data privacy regulations such as the "right to be forgotten" under the EU's GDPR and the California CCPA.
60%UnverifiedCCPA于2020年生效，赋予加州居民知晓、删除和拒绝出售个人数据的权利
60%UnverifiedThe GDPR has become a template for global privacy legislation, with Brazil's LGPD and California's CCPA both influenced by it.
50%UnverifiedUnder the frameworks of the GDPR, the CCPA, and China's Personal Information Protection Law, automated decision-making must meet requirements such as notice and consent and the right to opt out.
50%UnverifiedProduction speech applications need to address four issues: latency, cost, privacy (GDPR/CCPA compliance), and scalability.
50%UnverifiedRegulations such as GDPR and CCPA grant users the right to access and delete data, but actual enforcement depends on the vendor's processes.
50%UnverifiedBrowser fingerprinting is personal data and under the GDPR, CCPA, and China's Personal Information Protection Law frameworks generally requires notice and a legal basis; for anti-fraud purposes, legitimate interest in security and abuse prevention can be invoked, but the principle of minimum necessity should be followed and only hashes should be stored.
50%UnverifiedWhen building smart menus, developers should collect ingredient lists, recipes and preparation methods in structured formats such as JSON and CSV, accumulate historical order data for personalization, and ensure compliance with privacy regulations such as GDPR and CCPA.
50%UnverifiedCalifornia's CCPA focuses on notice, opt-out mechanisms, and data portability.
50%