How CCPA and CPRA Requests Work in California — Quiz

1.

Which of the following businesses would be required to comply with the CCPA/CPRA?

2.

The CPRA's addition of 'sharing' to the opt-out right was primarily intended to address which practice?

3.

How does the Global Privacy Control (GPC) differ from clicking a 'Do Not Sell or Share' link on a website?

4.

Which of the following is the most fundamental structural difference between the CCPA/CPRA and the GDPR?

5.

What is the maximum number of data access requests (for specific pieces of information) that a business must fulfil per consumer per year under CCPA/CPRA?

6.

Explain why the right to delete under CCPA/CPRA is described as a conditional right rather than an absolute right to erasure.

7.

As of 2026, the United States has no comprehensive federal consumer privacy law. What has emerged instead, and what are the key limitations of that approach?

8.

Describe what 'sensitive personal information' means under the CPRA and the right it creates, distinguishing it from the general right to opt out of sale or sharing.