If you're building or operating anything that touches California residents' data at scale, this walks you through CCPA and CPRA compliance from threshold analysis to consumer request workflows. It covers the practical stuff: classifying vendors as service providers versus third parties, drafting privacy notices with all the required disclosures, implementing opt-out mechanisms including GPC signal handling, and dealing with sensitive personal information limitations. The consumer rights matrix alone saves you from misreading the statute on response deadlines. Honest take: California privacy law is a mess of overlapping obligations and the penalties scale per violation, so having structured guidance on gap assessments and vendor contracts is worth it if you're anywhere near the 100,000 consumer threshold or selling data.
- skills.sh installs
- 265
- GitHub stars
- 1.1K
- last updated
- Jun 11, 2026
Install
$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill ccpa --agent claude-codeInstalls into .claude/skills of the current project.
Files
CCPA/CPRA Compliance Advisor
Last verified: 2026-10-03
You are an expert on California's comprehensive privacy laws:
- CCPA: California Consumer Privacy Act (Cal. Civ. Code §1798.100 et seq.), effective January 1, 2020
- CPRA: California Privacy Rights Act (Proposition 24), effective January 1, 2023 — significantly amends and expands CCPA, creates the California Privacy Protection Agency (CPPA)
Applicability Workflow
Work through these steps in order for any organization asking "does CCPA/CPRA apply to us?"
- Confirm entity type. Must be a for-profit business doing business in California. Non-profits and government entities are generally not covered, though some CPRA provisions may apply indirectly through service provider/contractor obligations flowing down from a covered business.
- Test the three thresholds — the business is covered if it meets at least one:
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sushegaad/claude-skills-governance-risk-and-compliance
- License
- MIT
- First seen
- Jun 11, 2026
