California privacy law, in plain English.

DataDuty is a practical resource on California privacy and data-protection law, written by a California attorney for businesses and the people who advise them. It explains what the law actually requires and how to comply.

Last reviewed September 26, 2026

Topics

Articles, checklists and explainers of key laws will be organized under these topics. Each article will show when it was last reviewed and link to the official source it relies on.

• Consumer privacy and consumer rights

  Requests to access and delete personal information, opt-outs of sale and sharing, and consent.

• Health information confidentiality

  HIPAA and California's Confidentiality of Medical Information Act, with a focus on healthcare and senior-care providers.

• Employee data

  Handling personal information about job applicants, employees and contractors.

• Vendor and service-provider contracts

  The privacy terms that belong in contracts with vendors, service providers and business associates.

• Data sharing and data transitions

  Sharing data with others, and moving it when switching providers or selling a business.

• Security policies and controls

  The written policies and practical safeguards that protect personal information.

• Data breaches

  Incident response, and notifying regulators and the people affected.

• Privacy notices

  What a privacy policy and notice at collection need to say, and where they need to appear.

• Privacy in new products and technology

  Building privacy into new products, features and technologies from the start.