What It Is

California Consumer Privacy Act (CCPA), as amended by CPRA, is a state regulation establishing consumer privacy rights for California residents. It targets for-profit businesses meeting thresholds like $25M revenue or handling 100K+ consumers' data, using a rights-based approach with opt-out emphasis over consent.

Key Components

• Core rights: know/access, delete, opt-out sales/sharing, correct, limit sensitive PI
• Obligations: notices at collection, privacy policies, DSAR handling within 45 days, GPC honoring
• Built on broad PI definition (identifiers, inferences, households); enforced by CPPA
• No certification; compliance via audits, contracts, security measures

Why Organizations Use It

• Mandatory for qualifying businesses to avoid $2,500-$7,500 per-violation fines, breach litigation
• Mitigates risks, builds consumer trust, enables market access
• Strategic: data governance efficiencies, GDPR alignment, competitive differentiation

Implementation Overview

Phased: scoping/gap analysis (0-3 months), policies/contracts (1-4 months), technical controls (2-6 months), operationalization/audits (ongoing). Applies globally to CA data handlers; cross-functional, tech-heavy for enterprises.

What It Is

ENERGY STAR is a U.S. government-backed voluntary labeling and benchmarking program administered by the EPA, with DOE support on test procedures. It certifies superior energy efficiency across products, homes, commercial buildings, and industrial plants using performance thresholds, standardized testing, and independent verification.

Key Components

• **Performance thresholdsCategory-specific metrics like EER/IEER for HVAC, AFUE for furnaces, above federal minimums.
• **Third-party certificationEPA-recognized labs and bodies; ongoing verification testing (5-20% annually).
• **Standardized testingDOE methods in 10 CFR.
• **Brand governanceStrict mark usage via Brand Book.
• **Portfolio ManagerBenchmarking tool for buildings/plants (75+ score for certification).

Why Organizations Use It

Reduces energy costs ($500B saved since 1992), emissions (4B tons avoided); unlocks rebates, procurement advantages; builds trust (90% recognition); supports ESG and policy compliance.

Implementation Overview

Phased: assess/gap analysis (4-8 weeks), design/testing/certification (3-12 months), deployment, ongoing verification. Applies to manufacturers, builders, owners across sizes/industries; annual third-party audits for buildings.