Privacy & Data Protection

Automate CCPA compliance

CCPA / CPRA · California Consumer Privacy Act / California Privacy Rights Act

California state law granting consumers rights over their personal information including the right to know, delete, opt-out of sale/sharing, and non-discrimination. CPRA amendments strengthen enforcement via the California Privacy Protection Agency.

37 controls24/7 continuous monitoring

Book a Demo All frameworks

CCPA

Overview

What is CCPA?

Who it applies to

For-profit businesses meeting defined thresholds that handle the personal information of California residents. Being outside the US is no defence - the test is who the data belongs to.

How the standard is organised

Framed as consumer rights - to know, delete, correct, and opt out of sale or sharing - with corresponding business obligations, rather than as a control catalogue.

Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Compliance Management Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.

On the platform

CCPA on the Bitkosh platform

The 37 CCPA controls sit in one workspace, evidence is collected from the systems you already run, and shared controls satisfy the equivalent requirement in the other 34 frameworks at the same time — so a second framework costs a fraction of the first.

How the platform works

Frequently Asked Questions

Who publishes CCPA, and who does it apply to?

CCPA is published by The State of California. For-profit businesses meeting defined thresholds that handle the personal information of California residents. Being outside the US is no defence - the test is who the data belongs to.

How is CCPA conformance demonstrated?

Enforced by a regulator - demonstrated, not certified. There is no certificate to obtain. Conformance is shown through mapped controls and retained evidence, and tested by a regulator or a counterparty rather than an auditor you appoint.

How is CCPA structured?

Framed as consumer rights - to know, delete, correct, and opt out of sale or sharing - with corresponding business obligations, rather than as a control catalogue. Bitkosh tracks 37 CCPA controls against it, each with its own evidence requirements, owner and review cadence.

Let's build together

Ready to automate CCPA?

See how the Bitkosh Compliance Management Platform gets you audit-ready for CCPA and 34 other frameworks from a single control library.

Book a Demo Send an enquiry