Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

CCPA/CPRA Compliance Advisor

A privacy-compliance skill that determines CCPA/CPRA applicability, maps consumer-rights workflows, designs opt-out mechanisms, and runs GDPR gap analyses.

Security & ReviewIntermediate★ 813⑂ 170AI score 8/10Last updated: Jul 20, 2026

What it does

  • Applicability analysis: walks the three thresholds ($25M revenue, 100k consumers/households, 50% revenue from selling/sharing) and classifies each downstream recipient.
  • Consumer-rights workflows: step-by-step handling for know, delete, correct, opt-out of sale/sharing, and limit-SPI requests — including tiered identity verification (2-point vs. 3-point + sworn declaration) and the 45-day / 15-business-day clocks.
  • Vendor classification: service provider vs. contractor vs. third party, plus the contract terms each requires.
  • Opt-out design: "Do Not Sell or Share" link, Global Privacy Control (GPC) handling, minors' opt-in, and the ADMT opt-out due January 1, 2027.
  • Penalty exposure: $2,500/$7,500 per violation, $100–$750 per consumer breach claims, and 2026 precedents (Disney, PlayOn, Ford).
  • GDPR mapping: flags US-specific deltas GDPR programs usually miss, notably the notice at collection.

Who it's for

  • Legal, privacy, and GRC teams at SaaS or e-commerce companies serving California residents
  • Global compliance teams with GDPR in place but weak US state coverage
  • Growth/marketing teams that need to know whether ad pixels and SDKs count as "sale" or "sharing"
  • Startups standing up their first privacy policy and DSR intake process

Example uses

  1. "We're a $40M SaaS with 30,000 California customers — are we in scope?" → the skill runs each threshold in order and drafts a documented determination.
  2. "A deletion request failed verification — now what?" → it applies Regs §7022(f): deny the deletion but treat it as an opt-out of sale/sharing.
  3. "Is passing hashed emails to an ad exchange 'sharing'?" → it explains that cross-context behavioral advertising cannot be papered over with service-provider terms (Regs §7050(c)).

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/HEAD/plugins/ccpa/skills/ccpa/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the plugins/ccpa/skills/ccpa folder from the GitHub repo Sushegaad/Claude-Skills-Governance-Risk-and-Compliance into my ~/.claude/skills/ccpa/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git && mkdir -p ~/.claude/skills && cp -r Claude-Skills-Governance-Risk-and-Compliance/plugins/ccpa/skills/ccpa ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open your terminal (Terminal on macOS/Linux, Git Bash on Windows).
  2. Clone the repo: git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git
  3. Create the skills folder if needed: mkdir -p ~/.claude/skills
  4. Copy the skill in: cp -r Claude-Skills-Governance-Risk-and-Compliance/plugins/ccpa/skills/ccpa ~/.claude/skills/
  5. Verify with ls ~/.claude/skills/ccpa and confirm SKILL.md is present.
  6. Restart Claude Code, then ask something like "Check whether we're in scope for CCPA/CPRA."
  7. Treat the output as general guidance only — confirm dates and figures with official sources and qualified counsel.
View source on GitHub ↗License: MIT