# CCPA (California Consumer Privacy Act)

**Canonical:** https://apis.io/providers/ccpa/  
**Website:** https://oag.ca.gov/privacy/ccpa  
**APIs profiled:** 4

The California Consumer Privacy Act (CCPA), amended by the California Privacy Rights Act (CPRA), is a state statute that grants California residents rights over their personal information: the right to know, delete, correct, opt-out of sale/sharing, limit use of sensitive personal information, and non-discrimination for exercising privacy rights. It is enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. Technical interoperability mechanisms include the Global Privacy Control (GPC) browser signal and the IAB Tech Lab US Privacy (USP) / Global Privacy Platform (GPP) signals for advertising technology. This index tracks the official regulatory resources, technical privacy signals, and commercial APIs that help businesses comply with CCPA/CPRA obligations.

## Kin Score — 12.6 / 100 (emerging)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 12.6).

| Facet | Score |
|---|---|
| Discoverability | 64.8 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 7.9 |
| Developer Ergonomics | 9.5 |
| Commercial Clarity | 15.8 |
| Access Clarity | 15.8 |

## Agent readiness — 3.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium — onboarding: unknown, pricing: freemium, trial: no (confidence: medium).

## APIs (4)

- **Global Privacy Control (GPC) Specification** — Global Privacy Control is a browser-level signal that communicates a user's opt-out preference to websites. The California Attorney General has affirmed that GPC must be treated...
- **IAB Tech Lab Global Privacy Platform (GPP)** — The IAB Tech Lab Global Privacy Platform (GPP) is the successor to the US Privacy (USP) string. It provides a standardized way to communicate user consent and opt-out signals be...
- **California Privacy Protection Agency (CPPA) Resources** — Official resources from the California Privacy Protection Agency, the body empowered by CPRA to implement, enforce, and publish regulations under the CCPA.
- **California Data Broker Registry** — Official California Attorney General registry of data brokers required to register under Civil Code section 1798.99.80, providing a public list that consumers can use to submit ...

## Security (2)

- **Ccpa Domain Security** — TLSv1.2 · HSTS · DNSSEC · DMARC
- **Ccpa Vulnerability Disclosure** — security.txt · contact published

## Plans (1)

- **Ccpa Plans Pricing**

## Use cases (9)

- **DSAR (Data Subject Access Request) Automation**
- **Consent Management Platform (CMP)**
- **Cookie Banner and Preference Center**
- **Data Inventory and Mapping**
- **Vendor Risk Management**
- **Privacy Impact Assessments**
- **Audit and Reporting**
- **Global Privacy Control Handling**
- **Data Broker Registration**

## Tags

CPRA, California, Compliance, Data Protection, Data Subject Rights, Legal, Privacy, Regulations

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/ccpa/). Scores are computed from the provider's own public artifacts under a published rubric.