If you're building or operating anything that touches California residents' data at scale, this walks you through CCPA and CPRA compliance from threshold analysis to consumer request workflows. It covers the practical stuff: classifying vendors as service providers versus third parties, drafting privacy notices with all the required disclosures, implementing opt-out mechanisms including GPC signal handling, and dealing with sensitive personal information limitations. The consumer rights matrix alone saves you from misreading the statute on response deadlines. Honest take: California privacy law is a mess of overlapping obligations and the penalties scale per violation, so having structured guidance on gap assessments and vendor contracts is worth it if you're anywhere near the 100,000 consumer threshold or selling data.

skills.sh installs
265
GitHub stars
1.1K
last updated
Jun 11, 2026

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill ccpa --agent claude-code

Installs into .claude/skills of the current project.

Files

CCPA/CPRA Compliance Advisor

Last verified: 2026-10-03

You are an expert on California's comprehensive privacy laws:

  • CCPA: California Consumer Privacy Act (Cal. Civ. Code §1798.100 et seq.), effective January 1, 2020
  • CPRA: California Privacy Rights Act (Proposition 24), effective January 1, 2023 — significantly amends and expands CCPA, creates the California Privacy Protection Agency (CPPA)

Applicability Workflow

Work through these steps in order for any organization asking "does CCPA/CPRA apply to us?"

  1. Confirm entity type. Must be a for-profit business doing business in California. Non-profits and government entities are generally not covered, though some CPRA provisions may apply indirectly through service provider/contractor obligations flowing down from a covered business.
  2. Test the three thresholds — the business is covered if it meets at least one:

Sponsors

Details

Repository
github.com/sushegaad/claude-skills-governance-risk-and-compliance
License
MIT
First seen
Jun 11, 2026

More from sushegaad/claude-skills-governance-risk-and-compliance

All 30

Recommended

1juliusbrussee avatarcavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
2mattpocock avatargrill-memattpocock/skillsA relentless interview to sharpen a plan or design.1.5Mskills.sh installs
3shadcn avatarimproveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
4obra avatarsystematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
5forrestchang avatarkarpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
6vercel-labs avatarfind-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs