cc3976fb7f
- Split competitive-analysis-2026-05.org → TOC + 9 competitor files in ideas/competitors/. Dropped date from filename. All competitor UUIDs generated, TOC keeps original UUID for backlink continuity. - Deleted passepartout-economics.org archive (replaced by 27-node KB). - Inlined 5 'See also' blocks into natural prose (compliance-index, first-mover-window, revenue-table, orders-of-magnitude-time, native-org-knowledge-base). - Linked 7 orphan compliance pages back to compliance index + finished truncated sentences. - Linked all 14 Agora requirement docs from topic-relevant pages (identity→lisp-machine-security, infrastructure→compute-marketplace, social-space→growth-strategy, exchange→agora-contracts, etc.). - Linked ai-industry-impact from investment-thesis, sufficiency-flip, verification-appliance, effects-growth-flywheel (up from 1 to 10+ pages). - Fixed CREATED timestamps to use git commit dates instead of today. - Made all links absolute from root (no port inheritance). - Removed stale agora/docs/ duplicate content.
25 lines
1.1 KiB
Org Mode
25 lines
1.1 KiB
Org Mode
:PROPERTIES:
|
|
:ID: 87996d87-100c-4bf6-8546-a860b9d7c25b
|
|
:ID: auto-ccpa-cpra
|
|
:CREATED: [2026-05-23 Sat]
|
|
:END:
|
|
#+title: CCPA/CPRA (California Consumer Privacy Act)
|
|
#+filetags: :passepartout:compliance:framework:ccpa:
|
|
|
|
|
|
California's comprehensive privacy law — the closest US analogue to [[id:513d5996-4ac7-4567-a992-18fc01599104][GDPR]].
|
|
CPRA (effective 2023) amended and strengthened CCPA. Key rights: right to
|
|
know, delete, opt out of sale/sharing, correct inaccurate data, limit use
|
|
of sensitive PI. Private right of action for data breaches.
|
|
|
|
Who must comply: For-profit businesses with >$25M revenue, or handling >100K
|
|
consumer records, or deriving >50% revenue from selling PI. Extraterritorial —
|
|
applies to any business collecting CA resident data.
|
|
|
|
Penalties: $2,500 per violation (intentional: $7,500). Private right of action
|
|
for breaches: $100-$750 per incident per consumer. CPRA created the California
|
|
Privacy Protection Agency (CPPA) for enforcement.
|
|
|
|
Why it matters: The opt-out/sale/sharing requirements create complex data flow
|
|
gate rules. The gate stack can encode "this data flow crosses a CCPA boundary"
|