// Privacy
CCPA/CPRA Compliance Software
California privacy law granting consumers rights over their personal information and imposing transparency, opt-out, security and accountability obligations on covered businesses (CCPA as amended by the CPRA).
Framework at a glance
Short name
CCPA/CPRA
Version
2023
Category
Privacy
Controls
18
What CCPA/CPRA covers
18 controls across 4 domains — every one tracked, owned and evidenced in Cyber Horizon.
Consumer Rights
7 controls- CCPA-01 Right to Know (Access)
- CCPA-02 Right to Delete
- CCPA-03 Right to Correct
- CCPA-04 Right to Opt-Out of Sale or Sharing
- CCPA-05 Right to Limit Use of Sensitive Personal Information
Transparency & Notices
4 controls- CCPA-08 Notice at Collection
- CCPA-09 Privacy Policy
- CCPA-10 Do Not Sell or Share My Personal Information Link
- CCPA-11 Limit the Use of My Sensitive Personal Information Link
Business Obligations
5 controls- CCPA-12 Verifiable Consumer Request Handling
- CCPA-13 Service Provider & Contractor Agreements
- CCPA-14 Data Minimisation & Purpose Limitation
- CCPA-15 Reasonable Security Measures
- CCPA-16 Opt-Out Preference Signals (GPC)
Governance & Accountability
2 controls- CCPA-17 Risk Assessments & Cybersecurity Audits
- CCPA-18 Recordkeeping & Staff Training
How Cyber Horizon automates CCPA/CPRA
Every CCPA/CPRA control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is CCPA/CPRA?
California privacy law granting consumers rights over their personal information and imposing transparency, opt-out, security and accountability obligations on covered businesses (CCPA as amended by the CPRA).
How many controls does CCPA/CPRA have?
CCPA/CPRA (2023) has 18 controls in Cyber Horizon's catalogue, organised across 4 domains.
How does Cyber Horizon help with CCPA/CPRA?
Cyber Horizon maps CCPA/CPRA into a shared control library alongside every other framework you run, so evidence collected once counts towards CCPA/CPRA and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Privacy frameworks
See CCPA/CPRA mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of CCPA/CPRA in Cyber Horizon.