AI Skill MartBrowse skillsPromptsProgramsLearnWhat is a Skill?
 
← Back to list

CCPA/CPRA Compliance Advisor

A privacy-compliance skill that walks through CCPA/CPRA applicability thresholds, consumer-rights workflows, opt-out mechanisms, and GDPR gap analysis.

Security & ReviewIntermediate★ 1,056⑂ 195AI score 8/10Last updated: Nov 7, 2026

What it does

  • Applicability analysis: steps through the three coverage thresholds ($25M revenue, 100,000 consumers/households, 50% of revenue from selling/sharing) and classifies each data recipient as service provider, contractor, or third party.
  • Consumer-rights workflows: step tables for the rights to know, delete, correct, opt out of sale/sharing, and limit SPI — including tiered identity verification (2-point vs. 3-point plus sworn declaration), 10-business-day acknowledgment, 45-day substantive response (one 45-day extension), and 15-business-day opt-out effectuation.
  • Ad-tech sale/sharing analysis: whether pixels, SDKs, cookie syncing, or exchange bidding count as "sharing," plus the rule that CCBA vendors cannot be service providers, and mandatory GPC signal handling.
  • Obligations and exposure: notice at collection, privacy policy contents, retention disclosures, cybersecurity audits and risk assessments (live Jan 1, 2026), ADMT opt-out (deadline Jan 1, 2027), $2,500/$7,500 penalties, and 2026 enforcement precedents (Disney $2.75M, PlayOn $1.1M, Ford $375K).
  • GDPR mapping: the US-specific deltas a GDPR program still has to add, with notice-at-collection flagged as the most commonly missed item.

Who it's for

  • Legal, privacy, and security teams at SaaS or e-commerce companies serving California residents
  • Global compliance teams extending a GDPR program into the US
  • PMs and engineers building DSR intake flows and consent/preference management

Example uses

  1. "We do $30M in US revenue — are we in scope, and how should we classify our seven data vendors?"
  2. "A deletion request failed identity verification. How do we handle it and what must we tell the consumer?"
  3. "Assess whether our Meta Pixel and ad-exchange integration is 'sharing' and give me an opt-out implementation checklist including GPC."

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/HEAD/plugins/ccpa/skills/ccpa/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on AI Skill Mart.
Copy the plugins/ccpa/skills/ccpa folder from the GitHub repo Sushegaad/Claude-Skills-Governance-Risk-and-Compliance into my ~/.claude/skills/ccpa/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git /tmp/grc-skills && mkdir -p ~/.claude/skills && cp -r /tmp/grc-skills/plugins/ccpa/skills/ccpa ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal.
  2. Clone the repository: git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git
  3. Create the skills directory: mkdir -p ~/.claude/skills
  4. Copy just this skill: cp -r Claude-Skills-Governance-Risk-and-Compliance/plugins/ccpa/skills/ccpa ~/.claude/skills/
  5. Confirm the bundled references/ files came along: ls ~/.claude/skills/ccpa
  6. Restart Claude Code and test with a prompt like "Is my business subject to CCPA/CPRA?"
  7. Cross-check figures and effective dates against the official CPPA site, and route real decisions through qualified counsel.
View source on GitHub ↗License: MIT