Law status
Verified comprehensive law
Yes - California Consumer Privacy Act of 2018 as amended (CCPA/CPRA)
- Official name / citation
- Cal. Civ. Code §§ 1798.100-1798.199.100
- Status / effective date
- In force; reviewed statute copy marked effective 01/01/2025
- Principal enforcer
- Attorney General and California Privacy Protection Agency (CalPrivacy)
Official-source case register
3 verified cases
Company, date, amount, legal basis, why the action was brought and the exact official URL are available in the dedicated register. Shared multistate amounts are not summed as unique state penalties.
Official law sources
Other generally applicable PII law
n.a. (comprehensive law exists)
Mapped control outcomes
1 personal data inventory/data map; 3 downstream copy tracking; 6 opt-out propagation validation; 7 marketing/vendor provenance; 10 regulator audit evidence
Kestryl can evidence discovery and inventory of the personal-data elements implicated in sale/sharing and opt-out claims across structured data and unstructured attachments/images, and can generate audit rows/evidence packs showing which stores and copies were identified; structured-data remediation is limited to mask/vault/strip. It cannot alter source attachments/documents and cannot by itself demonstrate that opt-out or deletion obligations were legally satisfied.
Educational information, not legal advice. This reference snapshot is dated August 25, 2026; confirm current law, applicability, exceptions, official status, and reporting decisions with qualified counsel and the relevant authority.