Take the 7-question CCPA audit applicability questionnaire
Independent Educational Resource

California Privacy Rights & CCPA Requirements, Explained

The authoritative guide to the California Consumer Privacy Act. Bridging the gap between consumer privacy rights and enterprise cybersecurity obligations.

Does your business need a CCPA cybersecurity audit?

Take our free seven-question applicability questionnaire. Review your California operations, annual revenue, and personal information processing to get an educational starting point for understanding potential audit requirements. No email is required to see your results.

Start the CCPA Audit Applicability Questionnaire

Educational guidance only—not legal advice or a compliance determination.

New 2026 Requirements

Mandatory Cybersecurity Audits for California Businesses

The CPPA is implementing stringent new cybersecurity audit requirements. Businesses processing consumer data above regulatory thresholds must complete independent, impartial cybersecurity audits and submit compliance certifications.

  • Independent verification required (no self-attestation)
  • Rigorous review of data handling and security controls
  • Significant penalties for non-compliance or delayed filing

Regulatory Thresholds

Annual Gross Revenue Threshold:
$26,625,000
Consumer Processing Threshold:
250,000+ consumers/households
Sensitive Info Threshold:
50,000+ consumers/households
Last Regulatory Review: Recent

Built on Primary California Sources

Civil Code § 1798.100
CPPA Regulations
OAL Approvals
Title 11, Div. 6

Operated by CyberAuthority LLC

We provide independent, impartial CCPA cybersecurity audits and privacy risk assessments for California businesses. Our certified auditors bridge the gap between legal privacy requirements and technical implementation.