DPO SchoolDPO School

California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act, Proposition 24)

California privacy law (CCPA): enforcement

Law as of October 28, 2026 Reviewed by Sergio Maldonado Elvira on 29 October 2026

Summary (not the statute text)

The CPPA enforces through administrative proceedings and fines, and the Attorney General through civil actions; both amounts are adjusted for inflation every odd-numbered year. Since 2025-01-01 the maximum is $2,663 per violation, or $7,988 per intentional violation or violation involving consumers known to be under 16. There is no right to cure, although the CPPA may allow time to cure at its discretion. Consumers may sue only over certain data breaches, for $107 to $799 per consumer per incident or actual damages.

Key points

  1. CPPA administrative fines up to $2,663 per violation or $7,988 for intentional violations or those involving known minors under 16 (adjusted 2025-01-01).

    Section: Cal. Civ. Code § 1798.155(a)

  2. Attorney General civil penalties at the same adjusted amounts, plus injunctions.

    Section: Cal. Civ. Code § 1798.199.90(a)

  3. Amounts are adjusted for inflation on January 1 of each odd-numbered year; next adjustment due 2027-01-01.

    Section: Cal. Civ. Code § 1798.199.95(d)

  4. No cure right; the CPPA may decline to investigate or give time to cure, considering intent and prior voluntary efforts.

    Section: Cal. Civ. Code § 1798.199.45(a)

  5. Private action limited to breaches of certain unencrypted data from a failure of reasonable security: $107 to $799 per consumer per incident (adjusted) or actual damages.

    Section: Cal. Civ. Code § 1798.150(a)(1)(A)

  6. Before suing for statutory breach damages, the consumer must give 30 days' written notice and a chance to cure.

    Section: Cal. Civ. Code § 1798.150(b)

Sources

Compare enforcement across all states

Related GDPR articles

Related, not equivalent: the GDPR and the state laws differ in scope, terms and exceptions.

Law as of October 28, 2026.

Reviewed by Sergio Maldonado Elvira on 29 October 2026. Prepared from the official sources listed.

Official text of the California statute

Reference material, not legal advice.