Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

CCPA/CPRA Compliance Advisor

A California privacy skill that walks through CCPA/CPRA applicability, consumer-rights workflows, opt-out/SPI/ADMT mechanics, and GDPR gap analysis.

Security & ReviewIntermediate★ 918⑂ 183AI score 8/10Last updated: Sep 15, 2026

What it does

  • Runs the three applicability thresholds in order ($25M revenue, 100k consumers/households, 50% of revenue from selling/sharing) to decide whether a business is covered.
  • Gives step-by-step workflows for every consumer right — know, delete, correct, opt-out of sale/sharing, limit SPI — with the exact clocks (10 business days to acknowledge, 45 days to respond, 15 business days for opt-out/limit) and tiered identity-verification standards.
  • Classifies downstream recipients as service provider, contractor, or third party, and analyses whether ad tech flows (pixels, SDKs, cookie syncing, exchange bidding) count as "sale" or "sharing", including mandatory GPC signal handling.
  • Covers the 2026-live obligations: cybersecurity audits, risk assessments, ADMT opt-out by Jan 1, 2027, penalty exposure, and 2026 enforcement precedents (Disney $2.75M, PlayOn $1.1M, Ford $375K).
  • Maps an existing GDPR programme to CCPA/CPRA and flags the US-only deltas, notably notice-at-collection.

Who it's for

  • Privacy/compliance owners at SaaS, e-commerce, or gaming companies serving California residents.
  • Legal teams with a mature GDPR programme who need a CCPA/CPRA gap assessment.
  • PMs and engineers building DSR intake pipelines or cookie/ad-SDK opt-out mechanics.

Examples

  1. "We do $40M revenue and have California users — are we in scope, and how should we classify our vendors?"
  2. "A deletion request failed verification. How do we respond, and must we treat it as an opt-out?"
  3. "Does our Meta pixel plus ad-exchange bidding constitute 'sharing'? Specify the opt-out coverage we need."

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/HEAD/plugins/ccpa/skills/ccpa/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the plugins/ccpa/skills/ccpa folder from the GitHub repo Sushegaad/Claude-Skills-Governance-Risk-and-Compliance into my ~/.claude/skills/ccpa/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git /tmp/grc-skills && mkdir -p ~/.claude/skills && cp -r /tmp/grc-skills/plugins/ccpa/skills/ccpa ~/.claude/skills/ccpa

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal (Terminal on macOS/Linux, Git Bash or WSL on Windows).
  2. Clone the repository: git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git
  3. Create the skills directory: mkdir -p ~/.claude/skills
  4. Copy the skill in: cp -r Claude-Skills-Governance-Risk-and-Compliance/plugins/ccpa/skills/ccpa ~/.claude/skills/ccpa
  5. Verify with ls ~/.claude/skills/ccpa — you should see SKILL.md and a references/ folder.
  6. Restart Claude Code and try a prompt like "Assess whether we are in scope for CCPA/CPRA" to trigger the skill.
View source on GitHub ↗License: MIT