What type of privacy issue are you facing?
My personal data was exposed in a data breach
Company won't respond to my data access/deletion request
Company is selling my data after I opted out
I want to understand my privacy rights
What type of personal information is involved?
Sensitive data: SSN, financial accounts, health info, biometrics
Login credentials (usernames, passwords)
Contact info, browsing history, purchase history
General marketing data or cookies
Have you already experienced harm from the privacy violation?
Yes - identity theft, fraud, or financial loss
Yes - I had to spend time/money on credit monitoring or protection
Not yet, but I'm concerned about future harm
No tangible harm so far
How large is the company involved?
Major corporation (Fortune 500, big tech, large retailer)
Mid-size company with significant online presence
Small business but handles lots of consumer data
Small local business
Is this part of a larger pattern or class action?
Yes - I've heard of others with the same issue
The company had a publicized data breach
I'm not sure if others are affected
This seems to be just my situation
What outcome are you seeking?
Just want the company to delete my data or stop selling it
Want to file a complaint with regulators
Want compensation for the harm I've suffered
Want to join or start a class action lawsuit
✅
You Can Likely Handle This Yourself
Your situation can probably be resolved through direct communication with the company or filing a complaint with the California Privacy Protection Agency. Use our templates to send formal CCPA requests.
File CPPA Complaint
Data Deletion Request
⚖
Legal Representation Recommended
Your situation involves factors that warrant legal help. Data breach claims with sensitive information, significant financial harm, or potential class actions benefit from attorney representation. Many privacy lawyers work on contingency for data breach cases.
Find Privacy Lawyer
CA Privacy Agency
⚠
Consider Legal Consultation
Your situation has some factors that might benefit from legal guidance. Many privacy attorneys work on contingency to evaluate potential data breach claims. Consider getting an expert opinion, especially if there's potential for a class action.
Get Consultation
Create CCPA Request
California Privacy Rights Under CCPA/CPRA
California has the strongest consumer privacy laws in the United States. The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you significant control over your personal information.
Your Rights: California residents can demand to know what data companies collect, request deletion, opt out of sales/sharing, correct inaccuracies, and limit use of sensitive data. Companies must respond within 45 days.
Your CCPA/CPRA Rights
| Right |
What It Means |
| Right to Know |
Request what personal info a business collects, uses, discloses, or sells |
| Right to Delete |
Request deletion of your personal information |
| Right to Opt-Out |
Tell businesses not to sell or share your personal info |
| Right to Correct |
Request correction of inaccurate personal information |
| Right to Limit |
Limit use of sensitive personal information |
| Right to No Retaliation |
Cannot be discriminated against for exercising rights |
When You Can Sue (Private Right of Action)
Important Limitation: Private lawsuits under CCPA are limited to DATA BREACHES only. You can sue if: (1) your unencrypted/unredacted personal information was breached, AND (2) the breach resulted from the business's failure to maintain reasonable security. Statutory damages are $100-$750 per consumer per incident, or actual damages if greater.
For OTHER CCPA violations (ignored requests, unlawful selling of data, etc.), you cannot sue directly. Instead:
- File a complaint with the California Privacy Protection Agency (CPPA)
- The Attorney General can bring enforcement actions with penalties of $2,500-$7,500 per violation
Data Breach Claims - When to Hire a Lawyer
| Factor |
DIY Approach |
Hire Lawyer |
| Type of data breached |
Non-sensitive data |
SSN, financial, health, biometric |
| Actual harm suffered |
No financial loss |
Identity theft, fraud |
| Number affected |
Just you |
Many people (class action) |
| Company response |
Cooperative, offering remediation |
Denying, ignoring |
| Potential recovery |
Under $1,000 |
$1,000+ or class action |
How to Exercise Your CCPA Rights
- Find the Company's Privacy Request Method: Usually in their privacy policy or "Do Not Sell My Info" link
- Submit a Verifiable Request: Provide enough info to verify your identity
- Wait for Response: Companies have 45 days (can extend to 90 days)
- Document Everything: Keep copies of all requests and responses
- Escalate if Needed: File CPPA complaint if ignored
Categories of Personal Information Under CCPA
- Identifiers (name, address, SSN, email, IP address)
- Customer records (phone, address, payment info)
- Protected classifications (age, race, gender, disability)
- Commercial information (purchase history, preferences)
- Biometric information
- Internet activity (browsing, search, interaction history)
- Geolocation data
- Audio, visual, or similar information
- Employment information
- Education information
- Inferences drawn from any of the above
Sensitive Personal Information (Extra Protections)
- Social Security number, driver's license, passport
- Financial account credentials
- Precise geolocation
- Racial/ethnic origin, religious beliefs, union membership
- Contents of mail, email, text messages
- Genetic data, biometric data for identification
- Health information
- Sex life or sexual orientation information
Helpful Resources
Related Resources