COMPEL Glossary / ccpa
CCPA
The California Consumer Privacy Act (CCPA) is a US state data privacy law that grants California residents specific rights over their personal data, including the right to know what personal information is being collected, the right to request deletion, the right to opt out of data sales, and the right to non-discrimination for exercising these rights.
What this means in practice
For organizations deploying AI that processes data of California residents, CCPA compliance requires transparency about data collection practices, the ability to honor consumer requests, and careful consideration of how personal data flows through AI training and inference pipelines. In COMPEL, CCPA is one of several regulatory frameworks assessed during the Calibrate stage under the Governance pillar, with compliance requirements mapped during the Model stage as part of the multi-jurisdictional governance architecture discussed in Module 3.4.
Why it matters
Organizations deploying AI that processes data of California residents must comply with CCPA requirements for transparency, consumer rights fulfillment, and data handling restrictions. As one of the most significant US data privacy laws, CCPA sets precedents that influence privacy regulation nationwide. Non-compliance creates legal exposure, financial penalties, and erosion of consumer trust that can undermine AI programs' social license to operate.
How COMPEL uses it
CCPA is assessed during the Calibrate stage under the Governance pillar as part of the multi-jurisdictional regulatory compliance evaluation. During Model, CCPA requirements are mapped into the data governance architecture and privacy control design. The Produce stage implements consumer rights fulfillment mechanisms for AI systems processing California resident data. The Evaluate stage audits CCPA compliance, and the Learn stage monitors regulatory enforcement trends.
Related Terms
Other glossary terms mentioned in this entry's definition and context.